last executing test programs: 9m26.738640917s ago: executing program 1 (id=38): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x16, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x6}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8}]}) 9m25.400616741s ago: executing program 1 (id=43): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000080d1b1a000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x36, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffcba) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b00010000000009"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x40, 0xf, 0x2, {0x2, 0x22}}, 0x0}, &(0x7f00000003c0)={0x1c, &(0x7f0000000200)={0x0, 0xf}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9}}) syz_usb_control_io$uac1(r2, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x120) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0xb) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x7, 0x80, 0x9, 0x110, 0x1b, "960100000000fffffdfd000000000000000008"}) 9m21.480159815s ago: executing program 1 (id=52): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000308ed14000000000000000000000000050003000600000006000240000000003c000480080004400000000008000a40000000000800064000000000080009400000010008000b"], 0x60}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000e1"]) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r3 = syz_io_uring_setup(0x13f2, &(0x7f0000000180)={0x0, 0x6bb0, 0x40, 0x2, 0x193}, &(0x7f0000000200), &(0x7f0000000280)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r6 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000300), 0x416501, 0x0) r7 = socket$pptp(0x18, 0x1, 0x2) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, r7], 0x6) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r8, &(0x7f0000001340)=[{&(0x7f0000000240)="13000000020203", 0x7}], 0x1) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000380)={0x1ff, 0x7, 0x4, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f00000003c0)={{0x1, 0x0, 0x1ffc000, 0xfffffffe, '\x00', 0xb71}, 0x1, [0x1, 0x5, 0x8000000000000000, 0x6, 0xdbc, 0x4d058131, 0x5, 0x10000, 0x49, 0x7fffffff, 0x4e9, 0x0, 0xfff, 0x4, 0xf6c, 0xa, 0x20e3, 0x3, 0xfff, 0x3ff, 0xffffffffffffffff, 0x0, 0xbd, 0x7ff, 0x750, 0x5, 0x4, 0x7fffffff, 0x101, 0x5, 0x6, 0xfffffffffffffffd, 0x4, 0x2, 0x1, 0x3, 0x1, 0x8000000000000000, 0x0, 0x401, 0x5, 0x6b, 0x4, 0x5, 0x9, 0x20000, 0x0, 0xd, 0x3ff, 0x5a86, 0x9, 0xcd39, 0x528a, 0x9, 0x9d4a, 0x5, 0x7, 0xc, 0x5, 0x5, 0x7fff, 0xb5, 0x7fffffff, 0xffffffff, 0xb, 0x7, 0x8, 0xffffffffffffff00, 0x7, 0x1, 0x100000001, 0xe7, 0x400, 0x12000000000000, 0x10000, 0x5, 0x8, 0x10, 0x4, 0x6, 0x1, 0x8000, 0x2, 0x93d, 0xe, 0x80000000, 0x1, 0x2, 0x9, 0x8, 0x5, 0x7f, 0x7, 0x2, 0x1000, 0x7, 0x7, 0xc2, 0x0, 0xb4, 0x353, 0x7fffffff, 0xffff, 0x1ff, 0xf, 0x4, 0x4, 0x5, 0x7fffffff, 0x101, 0x5, 0x101, 0x2270000, 0x4, 0x6ec9, 0x95a, 0x1, 0x4cc, 0x1, 0x100, 0x7fffffffffffffff, 0x3, 0x8001, 0x6, 0x8747, 0x9, 0x6, 0x8001]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r10, 0x800448d3, &(0x7f00000002c0)) 9m20.813140914s ago: executing program 1 (id=54): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x8000) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) sendmsg$alg(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000002800)='a', 0x1}], 0x1, 0x0, 0x0, 0x20000044}, 0x24040011) socket(0x15, 0x6, 0x9606) 9m20.541687024s ago: executing program 1 (id=57): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000140)={&(0x7f0000000640)={{@my=0x0}, {@host}, 0x400, "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"}, 0x418, 0x6}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) setreuid(0xffffffffffffffff, 0xee01) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x10, 0x1403, 0x1, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) mq_timedreceive(r0, &(0x7f0000000240)=""/120, 0x78, 0x8, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r5, 0xfffffff4}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000cfb8c9140000000000020000000a002040000000081400000008001f004e224e2314000200fe8000000000006e277633d9a0bbfc17"], 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m19.692346107s ago: executing program 1 (id=61): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x3, 0x1}}) read(r0, &(0x7f0000000040)=""/198, 0xc6) syz_usb_connect(0x2, 0x24, &(0x7f0000001ec0)={{0x12, 0x1, 0x300, 0xa8, 0x92, 0xf5, 0x10, 0x545, 0x8080, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xf9, 0x0, 0x81, [{{0x9, 0x4, 0x95, 0xae, 0x0, 0x54, 0x7f, 0x62, 0xb4}}]}}]}}, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r1, r1, 0x0, 0x400000000003f) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000006800010003000000000000800000000000000000090002000100000006000000080005"], 0x2c}}, 0x0) fallocate(r2, 0x10, 0x0, 0x200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 9m4.727827231s ago: executing program 0 (id=107): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143b02) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000004000000040000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r5, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 9m4.672581186s ago: executing program 32 (id=61): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x3, 0x1}}) read(r0, &(0x7f0000000040)=""/198, 0xc6) syz_usb_connect(0x2, 0x24, &(0x7f0000001ec0)={{0x12, 0x1, 0x300, 0xa8, 0x92, 0xf5, 0x10, 0x545, 0x8080, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xf9, 0x0, 0x81, [{{0x9, 0x4, 0x95, 0xae, 0x0, 0x54, 0x7f, 0x62, 0xb4}}]}}]}}, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r1, r1, 0x0, 0x400000000003f) r2 = dup(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000006800010003000000000000800000000000000000090002000100000006000000080005"], 0x2c}}, 0x0) fallocate(r2, 0x10, 0x0, 0x200) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) 9m3.747359644s ago: executing program 0 (id=111): bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xd, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007668c6b76b2454cf91b6fac0a29736d0000000018020000", @ANYRES32, @ANYBLOB="0000000002000000b70300000000000085000000ba000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc000000190001000000000000000000000000513375d1000000000000000000fc01000000000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x4801}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000006400), 0x0, &(0x7f0000006900)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c79", 0x98, 0xfffffffffffffffe) fsetxattr$security_ima(r2, &(0x7f0000000040), &(0x7f0000000080)=@ng={0x4, 0x11}, 0x2, 0x0) write$binfmt_script(r2, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9m2.730000022s ago: executing program 0 (id=113): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x88200, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x1010, r0, 0x7ca0f000) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000680)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000520006e3d01960bcffcdb16d010004bd7000fcdb"], 0x18}}, 0x800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x19c2de3b3620e11c, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x18) futimesat(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r10 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x89802) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xe8) quotactl_fd$Q_QUOTAON(r10, 0xffffffff80000201, r11, &(0x7f00000005c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r12}, 0x10) dup(r5) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) 9m2.381382458s ago: executing program 0 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) socket(0x1, 0x80802, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x141142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x6a0, 0x5, 0x348, 0x160, 0x0, 0xfeffffff, 0x160, 0x370, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@uncond, 0x3e7, 0x70, 0xb8, 0xe000000}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@broadcast, @ipv4=@remote, @gre_key}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_to_batadv\x00', 'xfrm0\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @rand_addr, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key}}}}, {{@ip={@dev, @multicast1, 0x0, 0x0, 'macvlan0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @loopback}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x40}}, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 9m1.153454663s ago: executing program 0 (id=117): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @dev={0xfe, 0x80, '\x00', 0xc}}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x400801, 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x140, 0x0) 9m0.107891449s ago: executing program 0 (id=121): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, 0x1403, 0x20, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x3) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000001100)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x7, [@typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @float={0x10, 0x0, 0x0, 0x10, 0x4}, @struct={0x4, 0x2, 0x0, 0x4, 0x0, 0x4, [{0x7, 0x1, 0x9}, {0x9, 0x5, 0x3}]}, @enum64={0x5, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x8, 0xc, 0x4}, {0x7, 0x2, 0xd7f}, {0x10, 0x1, 0x20bc}]}, @float={0x3, 0x0, 0x0, 0x10, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x7}}]}, {0x0, [0x30, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000880)=""/4096, 0xaf, 0x1000, 0x1, 0x42d}, 0x28) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a40)=@o_path={&(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x18, 0x21, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x723d, 0x0, 0x0, 0x0, 0xfffff001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}, @alu={0x4, 0x0, 0x5, 0x7, 0x4, 0x8, 0xfffffffffffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x3, 0xca, &(0x7f00000006c0)=""/202, 0x41100, 0xf, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000018c0)={0x0, 0xb, 0x7fff, 0xbd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[r8, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x284, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) 8m59.344154148s ago: executing program 33 (id=121): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x30}}, 0x40) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, 0x1403, 0x20, 0x70bd29, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x801) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0xfffff7fc, 0x0, 0x0, 0x0, 0x47, [0xfffffffc, 0x80]}}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0x3) r4 = socket(0x200000000000011, 0x4000000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000001100)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x7, [@typedef={0x8, 0x0, 0x0, 0x8, 0x4}, @float={0x10, 0x0, 0x0, 0x10, 0x4}, @struct={0x4, 0x2, 0x0, 0x4, 0x0, 0x4, [{0x7, 0x1, 0x9}, {0x9, 0x5, 0x3}]}, @enum64={0x5, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x8, 0xc, 0x4}, {0x7, 0x2, 0xd7f}, {0x10, 0x1, 0x20bc}]}, @float={0x3, 0x0, 0x0, 0x10, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x7}}]}, {0x0, [0x30, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000880)=""/4096, 0xaf, 0x1000, 0x1, 0x42d}, 0x28) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001a40)=@o_path={&(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001ac0)={0x18, 0x21, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x723d, 0x0, 0x0, 0x0, 0xfffff001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}, @alu={0x4, 0x0, 0x5, 0x7, 0x4, 0x8, 0xfffffffffffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x3, 0xca, &(0x7f00000006c0)=""/202, 0x41100, 0xf, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000018c0)={0x0, 0xb, 0x7fff, 0xbd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[r8, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x284, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) 1m32.241270404s ago: executing program 3 (id=936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x8dff, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', '', [{0x20, '}\xe7'}, {0x20, '/sys/kernel/debug/bluetooth/6lowpan_control\x00'}]}, 0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 1m10.742032959s ago: executing program 3 (id=936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x8dff, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', '', [{0x20, '}\xe7'}, {0x20, '/sys/kernel/debug/bluetooth/6lowpan_control\x00'}]}, 0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 54.631590249s ago: executing program 3 (id=936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x8dff, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', '', [{0x20, '}\xe7'}, {0x20, '/sys/kernel/debug/bluetooth/6lowpan_control\x00'}]}, 0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 39.087606428s ago: executing program 3 (id=936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x8dff, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', '', [{0x20, '}\xe7'}, {0x20, '/sys/kernel/debug/bluetooth/6lowpan_control\x00'}]}, 0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 21.333949271s ago: executing program 3 (id=936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x8dff, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', '', [{0x20, '}\xe7'}, {0x20, '/sys/kernel/debug/bluetooth/6lowpan_control\x00'}]}, 0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 15.111783347s ago: executing program 5 (id=2105): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143b02) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x800, 0x7ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000004000000040000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$igmp(0x2, 0x3, 0x2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000280)='./file1\x00') writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 13.823468481s ago: executing program 5 (id=2110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4, 0x19, {0x0, 0x0, 0x1}}}}, 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1\x00'}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106be051014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff0009240605060201000009240300030300"], 0x0) sendmmsg$unix(r2, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x5602, &(0x7f0000000000)={0x5c, "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"}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 9.120025991s ago: executing program 5 (id=2126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f00000000c0), 0x5400, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f0000000100)=@ethtool_eeprom={0x43, 0x8, 0xf, 0x5f, "79354226b54c258393029853f43efef7b9c2ddb6d257017ac173e64e0e81a744188239f979afa7f6c4136f397065d2fc21e2ec070fe12e478795d2779f025139389a42121d1fbe35ac434aa4390e61a6751130b0d7c667a920c15f4f828c60"}}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000024c0)="66b94b08000066b8fd7a000066ba000000000f30baf80c66b8d405078f66efbafc0c66edf30f090f22980fc72f0fc76876f30f1ec3660f38807f4d660f3810f3baf80c66b856a5ca8866efbafc0cb000ee"}], 0x1, 0x0, 0x0, 0x36) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000240)={0x101ff, 0x4, 0xeeee8000, 0x1000, &(0x7f0000ffc000/0x1000)=nil, 0x7}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095", @ANYRES32=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_GET_NESTED_STATE(r11, 0xc080aebe, &(0x7f0000000440)={{0x0, 0x0, 0x80}}) (rerun: 64) 8.112044593s ago: executing program 2 (id=2127): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) close(0xffffffffffffffff) r1 = fsopen(&(0x7f00000002c0)='ext4\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.38401035s ago: executing program 3 (id=936): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x8dff, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', '', [{0x20, '}\xe7'}, {0x20, '/sys/kernel/debug/bluetooth/6lowpan_control\x00'}]}, 0x34) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 4.866204718s ago: executing program 5 (id=2131): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000240)={0x20, 0x10, 0x2, '\v\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x200, @private2}]}, &(0x7f0000000180)=0x10) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000440)={0x3ff, 0x1, 0x2, 0x0, 0x7}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x1a0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) 4.865397616s ago: executing program 2 (id=2132): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0xff, 0x50, 0x1, 0x1, 0xfffffffffffffffc, 0x1, 0x6, 0x3, 0x10001, 0x80000001, 0x400, 0x7, 0x7, 0xffffffff, 0x17, 0x1, {0x8000, 0x8c}, 0x9, 0xa}}) 4.864336869s ago: executing program 4 (id=2133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000003a00)=[{{&(0x7f0000000a40)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000000040)=[{&(0x7f00000005c0)=""/80, 0x50}], 0x1}, 0x8}, {{&(0x7f0000000640)=@caif=@util, 0x80, &(0x7f0000004f80)=[{&(0x7f0000000980)=""/142, 0x8e}, {&(0x7f0000000400)=""/12, 0xc}, {&(0x7f0000000540)=""/3, 0x3}, {&(0x7f0000003c40)=""/4096, 0x1000}, {&(0x7f0000004c40)=""/163, 0xa3}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000004d00)=""/191, 0xbf}, {&(0x7f0000004dc0)=""/150, 0x96}, {&(0x7f0000004e80)=""/209, 0xd1}], 0x9, &(0x7f0000003640)=""/163, 0xa3}, 0x5}, {{&(0x7f0000000b00)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1, &(0x7f0000001b80)=""/143, 0x8f}, 0x1}, {{&(0x7f0000001c40)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002140)=[{&(0x7f0000001cc0)=""/226, 0xe2}, {&(0x7f0000001dc0)=""/30, 0x1e}, {&(0x7f0000001e00)=""/42, 0x2a}, {&(0x7f0000001e40)=""/221, 0xdd}, {&(0x7f0000001f40)}, {&(0x7f0000001f80)=""/209, 0xd1}, {&(0x7f0000002080)=""/164, 0xa4}], 0x7, &(0x7f00000021c0)=""/180, 0xb4}, 0x8}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002280)=""/97, 0x61}, {&(0x7f0000002300)=""/87, 0x57}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/81, 0x51}, {&(0x7f0000003400)=""/67, 0x43}, {&(0x7f0000003480)=""/206, 0xce}, {&(0x7f0000003580)=""/24, 0x18}, {&(0x7f00000035c0)=""/106, 0x6a}, {&(0x7f0000003b80)=""/191, 0xbf}], 0x9, &(0x7f00000037c0)=""/127, 0x7f}, 0x20f5}, {{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000005040)=""/76, 0x4c}, {&(0x7f0000003880)=""/247, 0xf7}, {&(0x7f0000003980)=""/32, 0x20}], 0x3}, 0x9}], 0x6, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xf, 0xfff1}, {0xfff3, 0x2}, {0xd, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20000000) r8 = fsopen(&(0x7f0000000440)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000200)='source', &(0x7f00000006c0)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\xb0\t\x00\x00\x00\x00\x00\x00U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/\xb4\x00\x80_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b7\x8aH\xd6\xd8\xbf\xe7\xc4|y\x1b\xd3\x88\x139\x8a/L;)?\x80J\x85\xf0[?\x01\xa3\x02~5*\x94`\x1a\"g\x8aV\xb6q{\xbc\x18\x99Y\x12\xd2\xc2\n>\xbb)\xf6|*\xbb\x14F\nZ\xact\xc5\x12\xdd\xda\xe4\x91\x0f\xdf\xb1\xf4\xf7\xa8?tO\xa6|\x11clY\x02\x17 \xf6\xe7\x8a\x93vr\x80A\xbc\xdd#\xd5y\v\xf5\xd6\xe7B\xf1@\xe1w\xfa[\xa4;\xf6\x99\x02\xa8\xcbu\xf1jdV<\xe4y\xf6\xb9\xadHN\a_w ?\xe7\x83\"\xf5\x1f\xb2\x04\x80\xcay\x03`\xa3\xf0+i2jQ\xea\x00um\xe1g\xa4\xd4\xec;\x87\x9c\xef\xc9\x91\xa8\xb2\xef\xee\x98\x12\xd2!\x89\x98T\xdb%R\'\x01\f\xb4\xf4a\x81\x00X\xea\x1c\x03<\xc05\x0e\xd8\xfe9\xd9\x99\xe7\xf5\xc3\x97.\xf4Y\xb7!/yy\xee\x84\xef\bw=\xab\xea\x18\xdaS\xf2\'S:\x86\xf6o\x89\xf1\xe0\xcc\x13P\xa7\x06\xc6\xe9\xfe\xed\xf7\x04\xadJ\xfd:\x9fL>=\xdbQ\xde\xb0\x1e$\xd1\x17\f\xddiN\xf5\xca\x84\xf3\xd5[\x1e\xb2\x9d6\x89\xc7w\x14\xb6\xb9G\x80\xb3\xd4C', 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff0000}, 0x94) 4.603975677s ago: executing program 6 (id=2134): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) mount$cgroup2(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000480), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='memory_recursiveprot,memory_recursiveprot,nsdelegate']) syz_usb_connect(0x2, 0x51, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xab, 0xc1, 0x65, 0x20, 0x1b3d, 0x1a4, 0x3b11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0xd9, 0x8, 0x0, 0x77, [{{0x9, 0x4, 0x4, 0x2, 0x5, 0xd1, 0xa2, 0x41, 0x7, [], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0xc5, 0x5, 0xc7}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0xc8, 0x6, 0x40}}, {{0x9, 0x5, 0x3, 0x16, 0x8, 0xa, 0x76, 0x80}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x3, 0xa, 0x7}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x8, 0x1, 0x1}}]}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) fcntl$getflags(0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000080), &(0x7f0000000040)=0x4) epoll_create1(0x80000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 4.57701184s ago: executing program 2 (id=2135): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r4, 0x1, 0xfffffffd, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x20040010) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_usb_connect(0x3, 0x2f, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0xc1, 0x16, 0x7d, 0x8, 0x99e, 0x52, 0x5f88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0xf9, 0x8, 0x80, 0x4, [{{0x9, 0x4, 0x90, 0x3, 0x1, 0xd0, 0x22, 0x66, 0x5, [], [{{0x9, 0x5, 0xa, 0x0, 0x400, 0x6, 0x7, 0x5, [@generic={0x2, 0x9}]}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x5, &(0x7f0000000000)=@string={0x5, 0x3, "7a81e8"}}, {0x6f, &(0x7f0000000040)=@string={0x6f, 0x3, "f23f23429a99d714470822e63141160440fb56d702cf82a6620edbf9dfdbc4a18bf99318906322e128c10ff2466b40c9c2b0437c5af353e9be7a5089bf1131d39a345465efb798c1c647e35e070139f5cc955896c81551b1251fcdedc24cc9fdf5973f8bf340c2e33dd87bde7e"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x427}}, {0xea, &(0x7f0000000100)=@string={0xea, 0x3, "53b9e2d43e7688c7fc03ab0a4d19178ed5a6b6bdfa5144720cff419a361de141513a6c81eaa5201e3645f1eb02c2d44878e96df1d6be48af9a2ffe66b58f107eaf7e2727945572078b6a22cbcc7475fe1ebe0a59efd83b1332b717c29fdbdc5801613d103e3d9da4de951810bb52cf428cd5f8363123158104a97bbf342d4e60fe3be5614cb1ba0e9da1b871a7148e4ce0feea37006653d24bf6ff08140d8bc187d78c99bebabb3aac247ab79f53e726e3b7e64e8987b905f5b96c05df125d49f293731229f89efde1cac5025905a5bc9c15962a99a003cb1e054e6d5d5833d6fc482b2e9ae5aa2f"}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "73c100ed7e9a5bbc1ca465c51d7ede5c8aab4fefd4b24d3f28db9a5c58d8c2ef80ffb73ce868158a91754bb6a97e7ebd75ff2477ca719ca34a8cd6db7f"}}, {0xbb, &(0x7f0000000240)=@string={0xbb, 0x3, "aac59653866ef0dbc1f626831fbaed4e91eee1b66091b6e04ee81229970132c646ceb191da6c8141c71f0fc0e13b72ce8c855a9cdc35754f651bf765565239556efe77522b90395f897618fd160aa3622049fbbdef63fda113155206fbfe1d1baa8d4eff7951d47942ae306c4c0432d4b2c799c1b3effe08a39cf7c33fe65da0b48c3c2908c1f1c78ad4cc0286f85f9a8a1f12a460f47d16b5dd348dd5e33f758cf27cc07f98991330447fd635f58453203e84ff75583e11f5"}}]}) 3.859199339s ago: executing program 6 (id=2136): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4, 0x19, {0x0, 0x0, 0x1}}}}, 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1\x00'}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106be051014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff0009240605060201000009240300030300052c0c"], 0x0) sendmmsg$unix(r2, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x5602, &(0x7f0000000000)={0x5c, "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"}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 3.794713974s ago: executing program 4 (id=2137): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kmem_cache_free\x00', r2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r4, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @remote}, 0xa}}, 0x26) sendmmsg$inet(r4, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r5, @ANYRES16, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000000000)=0x40008) r9 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000023000/0x2000)=nil, 0x2000, 0xb635773f06ebbee0, 0x10, r7, 0xe98c4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x50) sendmmsg$unix(r8, &(0x7f0000000000), 0x0, 0x20000861) recvmmsg(r10, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 3.324203358s ago: executing program 5 (id=2138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="181001000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 3.211869125s ago: executing program 6 (id=2139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4, 0x19, {0x0, 0x0, 0x1}}}}, 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1\x00'}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106be051014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff0009240605060201000009240300030300"], 0x0) sendmmsg$unix(r2, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x5602, &(0x7f0000000000)={0x5c, "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"}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 2.900901401s ago: executing program 2 (id=2140): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) close(r0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380)={r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x5, 0xc8, 0x2}}}, 0x7) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x40, 0x440) ioctl$LOOP_SET_STATUS(r5, 0x4c02, 0x0) r6 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x140a, 0x1, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) 2.824048873s ago: executing program 4 (id=2141): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x103e}}, 0x1006) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xfffffffffffffffd, 0x200000000000, 0x10000, 0x3, 0x80000200004, 0x400000000, 0x800, 0x7fffffff}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.387228758s ago: executing program 2 (id=2142): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socket$xdp(0x2c, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5e) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast1, @in=@local, 0x4e20, 0x4, 0x4e21, 0x6, 0xa, 0xa0, 0x80, 0x2b}, {0x8, 0x2, 0x8000000000000000, 0x8fda, 0x2, 0x5, 0x0, 0x3}, {0x0, 0x5, 0x0, 0x8001}, 0xa5a, 0x6e6bb1, 0x2, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3502, 0x0, 0x0, 0x6, 0x4, 0x7, 0x7}}, 0xe8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) 1.262574174s ago: executing program 6 (id=2143): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000004095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000000000008000700", @ANYRES32, @ANYBLOB="08000400000000000c0003000000000000000000080005000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000060006"], 0x50}}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x3, 0x0, {0xa, 0x0, 0x6, @rand_addr=' \x01\x00', 0x200000}}}, 0x32) getsockname$tipc(r0, 0x0, &(0x7f00000000c0)) 1.100150759s ago: executing program 4 (id=2144): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="130000001000000008"], 0x50) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="1f", 0x1, 0x5) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) sendfile(r4, r0, 0x0, 0xbc53489) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400090011000b052a149c00fbdbdf2500000000", @ANYRES64=r5], 0x34}}, 0x20004004) 1.042155509s ago: executing program 6 (id=2145): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) splice(r4, &(0x7f00000000c0)=0x9, 0xffffffffffffffff, &(0x7f0000000100)=0x15d, 0xffffffffffffff89, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x38, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x20000000000000b2, 0x1}}, 0x40) 792.792413ms ago: executing program 5 (id=2146): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) mount$cgroup2(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000480), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='memory_recursiveprot,memory_recursiveprot,nsdelegate']) syz_usb_connect(0x2, 0x51, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xab, 0xc1, 0x65, 0x20, 0x1b3d, 0x1a4, 0x3b11, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0xd9, 0x8, 0x0, 0x77, [{{0x9, 0x4, 0x4, 0x2, 0x5, 0xd1, 0xa2, 0x41, 0x7, [], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0xc5, 0x5, 0xc7}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0xc8, 0x6, 0x40}}, {{0x9, 0x5, 0x3, 0x16, 0x8, 0xa, 0x76, 0x80}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x3, 0xa, 0x7}}, {{0x9, 0x5, 0x7, 0x8, 0x10, 0x8, 0x1, 0x1}}]}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) fcntl$getflags(0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000080), &(0x7f0000000040)=0x4) epoll_create1(0x80000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 257.742013ms ago: executing program 4 (id=2147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x4004890) 181.957509ms ago: executing program 2 (id=2148): r0 = io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x54cd, 0x800, 0x0, 0x1d}) r1 = landlock_create_ruleset(&(0x7f00000004c0)={0x0, 0x1}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r1, 0x2, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000540)=0x5000, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x0, 0x0}) getresgid(0x0, &(0x7f0000000180), 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x45) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 139.516277ms ago: executing program 4 (id=2149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x4, 0x19, {0x0, 0x0, 0x1}}}}, 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1\x00'}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106be051014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c240208000103000000ff0009240605060201000009240300030300052c0c"], 0x0) sendmmsg$unix(r2, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x5602, &(0x7f0000000000)={0x5c, "96d3e9659db3f50cb3c4e683f4fae026a3b284dd56630882be4bc0f34042227a71f06b95d73e34c8ecf3325e43f75f16f13d8905d3bdce627dc6ae0b14840f4c8bebc40872293c61ddd293631a22c6d5c8c9b16b987f4326874ddc5e2610c5505cea115e51bf6feb3e93cf89b8f44394fa2ac7f6cf757a9416c7545c5e5caa34450f0397d179f2225b57f644ce8ad31b15547b9364daef8e784f2036a75c3c5cfd124cdd424a558ea90d054d36c0d1d0db92e5e7f668dadcbfaed92c7cf3204be0c4904d308feba3447d7f41a58bc2fd4682e306a592696e4de9427d87c008d3e172cf162cc35f00915fe9fc9ea84e28838940e4bb2fda4c55a34abdf6db63d547c91a17211a1ce43a2933f8227e8b6767ab70bc9223e62a2d3ad9b13f74e2000961e62eaea005088d6d74a19eb0c56ce314323143fcfe27e410e10bd21a2140783385bdb1a7d33038427e336829ccfb63c04e537ca51ddae5fdf29505fca04fc4b2a13d6dad7db2eace60e9589712719a49a2d2d44587465037851b1fe93a0ed46822294671098fd53e79fe428bf6ae3846299ab1d238ad07be6cc01b5fcaacfce829c209e67d5548a38b637f3b44905b8be24dfba30e1b6d074b43e53fcded14a4190a585949baa43fef6c70ce7b1612299d734c07feed23252886a1317358cf5ecaf0186d2dbdb3eab8a9c3c21d4828ef8a9dd89207f2884a57679fcd495a"}) connect$inet(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$x25(0x9, 0x5, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r7 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) 0s ago: executing program 6 (id=2150): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r4, 0x1, 0xfffffffd, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x20040010) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_usb_connect(0x3, 0x2f, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0xc1, 0x16, 0x7d, 0x8, 0x99e, 0x52, 0x5f88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0xf9, 0x8, 0x80, 0x4, [{{0x9, 0x4, 0x90, 0x3, 0x1, 0xd0, 0x22, 0x66, 0x5, [], [{{0x9, 0x5, 0xa, 0x0, 0x400, 0x6, 0x7, 0x5, [@generic={0x2, 0x9}]}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x5, &(0x7f0000000000)=@string={0x5, 0x3, "7a81e8"}}, {0x6f, &(0x7f0000000040)=@string={0x6f, 0x3, "f23f23429a99d714470822e63141160440fb56d702cf82a6620edbf9dfdbc4a18bf99318906322e128c10ff2466b40c9c2b0437c5af353e9be7a5089bf1131d39a345465efb798c1c647e35e070139f5cc955896c81551b1251fcdedc24cc9fdf5973f8bf340c2e33dd87bde7e"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x427}}, {0xea, &(0x7f0000000100)=@string={0xea, 0x3, "53b9e2d43e7688c7fc03ab0a4d19178ed5a6b6bdfa5144720cff419a361de141513a6c81eaa5201e3645f1eb02c2d44878e96df1d6be48af9a2ffe66b58f107eaf7e2727945572078b6a22cbcc7475fe1ebe0a59efd83b1332b717c29fdbdc5801613d103e3d9da4de951810bb52cf428cd5f8363123158104a97bbf342d4e60fe3be5614cb1ba0e9da1b871a7148e4ce0feea37006653d24bf6ff08140d8bc187d78c99bebabb3aac247ab79f53e726e3b7e64e8987b905f5b96c05df125d49f293731229f89efde1cac5025905a5bc9c15962a99a003cb1e054e6d5d5833d6fc482b2e9ae5aa2f"}}, {0x3f, &(0x7f0000000200)=@string={0x3f, 0x3, "73c100ed7e9a5bbc1ca465c51d7ede5c8aab4fefd4b24d3f28db9a5c58d8c2ef80ffb73ce868158a91754bb6a97e7ebd75ff2477ca719ca34a8cd6db7f"}}, {0xbb, &(0x7f0000000240)=@string={0xbb, 0x3, "aac59653866ef0dbc1f626831fbaed4e91eee1b66091b6e04ee81229970132c646ceb191da6c8141c71f0fc0e13b72ce8c855a9cdc35754f651bf765565239556efe77522b90395f897618fd160aa3622049fbbdef63fda113155206fbfe1d1baa8d4eff7951d47942ae306c4c0432d4b2c799c1b3effe08a39cf7c33fe65da0b48c3c2908c1f1c78ad4cc0286f85f9a8a1f12a460f47d16b5dd348dd5e33f758cf27cc07f98991330447fd635f58453203e84ff75583e11f5"}}]}) kernel console output (not intermixed with test programs): [ 536.835784][ T5870] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 536.918795][T13233] fuse: Bad value for 'fd' [ 536.925988][T13204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.969389][T13204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.127749][T13204] team0: Port device team_slave_0 added [ 537.136229][T13233] lo speed is unknown, defaulting to 1000 [ 537.144335][T13204] team0: Port device team_slave_1 added [ 537.231466][ T5819] Bluetooth: hci0: command tx timeout [ 537.313065][ T5136] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.585340][T11607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.641540][T13233] lo speed is unknown, defaulting to 1000 [ 537.666456][T13204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.674034][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.736100][T13204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.784905][T13204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.799735][T13204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.905901][T13204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.022340][T13204] hsr_slave_0: entered promiscuous mode [ 538.028785][T13204] hsr_slave_1: entered promiscuous mode [ 538.332690][ T5136] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 538.379958][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1752'. [ 538.500299][ T5136] usb 6-1: Using ep0 maxpacket: 16 [ 538.521064][ T5136] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 538.536970][ T5136] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 538.547140][ T5136] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.569014][ T5136] usb 6-1: config 0 descriptor?? [ 538.581081][ T5136] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19 [ 538.591063][ T5870] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 538.693124][T13204] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 538.705402][T13204] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 538.715942][T13204] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 538.725202][T13204] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 538.792555][T13204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.813379][T13204] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.826137][T11654] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.833299][T11654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.852999][ T5171] bcm5974 6-1:0.0: could not read from device [ 538.863905][T11654] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.871067][T11654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.898391][ T5136] bcm5974 6-1:0.0: could not read from device [ 538.976354][ T5171] bcm5974 6-1:0.0: could not read from device [ 539.006263][ T5136] input: failed to attach handler mousedev to device input19, error: -5 [ 539.034355][ T5171] bcm5974 6-1:0.0: could not read from device [ 539.040324][ T5136] usb 6-1: USB disconnect, device number 63 [ 539.048736][ T5171] bcm5974 6-1:0.0: could not read from device [ 539.274910][T13204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.309057][T13204] veth0_vlan: entered promiscuous mode [ 539.331413][ T5819] Bluetooth: hci0: command tx timeout [ 539.434850][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 539.800698][ T5885] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 539.815092][T13204] veth1_vlan: entered promiscuous mode [ 539.839080][T13204] veth0_macvtap: entered promiscuous mode [ 539.848713][T13204] veth1_macvtap: entered promiscuous mode [ 539.863879][T13204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.880775][T13204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.893357][T13204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.903137][T13204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.914890][T13204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.923769][T13204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.065905][T11654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.091430][T11654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.136463][T11655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.257031][T11655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.826962][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 540.826977][ T30] audit: type=1326 audit(1750869140.057:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.2.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832b38e929 code=0x7ffc0000 [ 540.997341][ T5885] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 541.011026][ T30] audit: type=1326 audit(1750869140.127:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.2.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f832b38e929 code=0x7ffc0000 [ 541.034640][ T30] audit: type=1326 audit(1750869140.127:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.2.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832b38e929 code=0x7ffc0000 [ 541.058739][ T30] audit: type=1326 audit(1750869140.127:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.2.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f832b38e929 code=0x7ffc0000 [ 541.115917][T13295] fuse: Bad value for 'fd' [ 541.281412][T13295] lo speed is unknown, defaulting to 1000 [ 541.289787][T13295] lo speed is unknown, defaulting to 1000 [ 541.583239][T13301] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1763'. [ 541.951425][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.274068][ T5885] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 542.478239][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059b82c00: rx timeout, send abort [ 542.489000][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b6fd400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 542.505642][ T30] audit: type=1400 audit(1750869141.737:2408): avc: denied { read } for pid=5168 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 542.529124][ T30] audit: type=1400 audit(1750869141.737:2409): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.630875][ T30] audit: type=1400 audit(1750869141.737:2410): avc: denied { search } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.652896][ T30] audit: type=1400 audit(1750869141.737:2411): avc: denied { add_name } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.752379][ T5885] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 542.760962][ T30] audit: type=1400 audit(1750869141.737:2412): avc: denied { create } for pid=5168 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 542.800189][ T30] audit: type=1400 audit(1750869141.737:2413): avc: denied { append open } for pid=5168 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 542.910651][ T5885] usb 6-1: Using ep0 maxpacket: 8 [ 542.988117][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059b82c00: abort rx timeout. Force session deactivation [ 543.270572][T13320] netlink: 'syz.6.1767': attribute type 10 has an invalid length. [ 543.279863][T13320] veth1_vlan: entered allmulticast mode [ 543.300275][T11654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.351328][ T5885] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 543.356870][T13320] team0: Device veth1_vlan failed to register rx_handler [ 543.361141][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.378315][ T5885] usb 6-1: config 0 descriptor?? [ 543.659737][ T5885] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 543.673448][ T5885] asix 6-1:0.0: probe with driver asix failed with error -32 [ 543.871488][ T5885] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 545.023937][ T5136] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 545.250526][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 545.429886][ T5948] usb 6-1: USB disconnect, device number 64 [ 545.517474][ T5900] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 545.690294][ T5900] usb 3-1: Using ep0 maxpacket: 16 [ 545.698908][ T5900] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 545.733398][ T5900] usb 3-1: config 0 has no interface number 0 [ 545.758710][ T5900] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 545.803330][ T5900] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 545.828725][T13360] IPv6: NLM_F_REPLACE set, but no existing node found! [ 546.067014][ T5900] usb 3-1: config 0 interface 41 has no altsetting 0 [ 546.067065][ T5136] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 546.075750][ T5900] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 546.093478][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.101596][ T5900] usb 3-1: Product: syz [ 546.105808][ T5900] usb 3-1: Manufacturer: syz [ 546.115314][ T5900] usb 3-1: SerialNumber: syz [ 546.122708][ T5900] usb 3-1: config 0 descriptor?? [ 546.128371][T13340] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 546.135753][T13340] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 546.344823][T13340] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 546.352566][T13340] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 546.384012][T13365] lo speed is unknown, defaulting to 1000 [ 546.392511][T13365] lo speed is unknown, defaulting to 1000 [ 546.685692][T11620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.761864][ T5900] Error reading MAC address [ 547.059212][T11620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.125332][T11620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.184651][T11620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.282635][T11620] bridge_slave_1: left allmulticast mode [ 547.288621][T11620] bridge_slave_1: left promiscuous mode [ 547.294471][T11620] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.304336][T11620] bridge_slave_0: left allmulticast mode [ 547.310026][T11620] bridge_slave_0: left promiscuous mode [ 547.316060][T11620] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.598417][T11620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.608964][T11620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.618807][T11620] bond0 (unregistering): Released all slaves [ 547.868063][T11620] hsr_slave_0: left promiscuous mode [ 547.874455][T11620] hsr_slave_1: left promiscuous mode [ 547.880709][T11620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.888197][T11620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.896583][T11620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.905062][T11620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.921148][T11620] veth1_macvtap: left promiscuous mode [ 547.926697][T11620] veth0_macvtap: left promiscuous mode [ 547.932382][T11620] veth1_vlan: left promiscuous mode [ 547.937632][T11620] veth0_vlan: left promiscuous mode [ 548.015058][ T5900] sr9700 3-1:0.41: probe with driver sr9700 failed with error -71 [ 548.028797][ T5900] usb 3-1: USB disconnect, device number 95 [ 548.305990][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 548.306016][ T30] audit: type=1400 audit(1750869147.537:2416): avc: denied { getopt } for pid=13376 comm="syz.2.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 548.512798][T11607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 548.526551][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 548.538186][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 548.550613][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 548.568059][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 548.586514][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 548.624627][T11620] team0 (unregistering): Port device team_slave_1 removed [ 548.665648][T11620] team0 (unregistering): Port device team_slave_0 removed [ 549.729561][T13390] lo speed is unknown, defaulting to 1000 [ 549.756185][T13390] lo speed is unknown, defaulting to 1000 [ 550.050566][T13415] overlayfs: failed to clone upperpath [ 550.531474][T13417] SET target dimension over the limit! [ 550.671461][ T5819] Bluetooth: hci0: command tx timeout [ 550.914825][T11646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.951765][T11655] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.996106][T13420] overlayfs: failed to clone upperpath [ 551.025810][ T30] audit: type=1400 audit(1750869150.247:2417): avc: denied { getopt } for pid=13418 comm="syz.4.1797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 551.053344][T13390] chnl_net:caif_netlink_parms(): no params data found [ 551.068717][ T30] audit: type=1326 audit(1750869150.287:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13423 comm="syz.6.1798" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd8e929 code=0x0 [ 551.226164][T13390] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.240331][T13390] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.250894][T13390] bridge_slave_0: entered allmulticast mode [ 551.258929][T13390] bridge_slave_0: entered promiscuous mode [ 551.266522][ T30] audit: type=1400 audit(1750869150.497:2419): avc: denied { lock } for pid=13407 comm="syz.2.1795" path="socket:[46900]" dev="sockfs" ino=46900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 551.292114][T13390] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.299234][T13390] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.307532][T13390] bridge_slave_1: entered allmulticast mode [ 551.314628][T13390] bridge_slave_1: entered promiscuous mode [ 551.340697][T13390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.352464][T13390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.381987][T13390] team0: Port device team_slave_0 added [ 551.391322][T13390] team0: Port device team_slave_1 added [ 551.414506][T13390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.421829][T13390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.448076][T13390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 551.460712][T13390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 551.467667][T13390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.497459][T13390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 551.535302][T13390] hsr_slave_0: entered promiscuous mode [ 551.542357][T13390] hsr_slave_1: entered promiscuous mode [ 551.550644][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.901829][T13449] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1804'. [ 552.005027][ T30] audit: type=1400 audit(1750869151.227:2420): avc: denied { read } for pid=13451 comm="syz.4.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 552.212726][T13390] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 552.222499][T13390] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 552.233495][T13390] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 552.243101][T13390] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 552.296982][T13390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.315025][T13390] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.327244][T11620] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.334393][T11620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.347681][T11646] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.354844][T11646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.506622][T13390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.564643][T13390] veth0_vlan: entered promiscuous mode [ 552.582935][T13390] veth1_vlan: entered promiscuous mode [ 552.624128][T13390] veth0_macvtap: entered promiscuous mode [ 552.637947][T13390] veth1_macvtap: entered promiscuous mode [ 552.661119][T13390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.682918][T13390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.703913][T13390] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.725999][T13390] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.747451][T13390] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.767270][ T5819] Bluetooth: hci0: command tx timeout [ 552.776152][T13390] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.966000][T13475] overlayfs: failed to resolve './file0': -2 [ 553.342098][T11654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.364005][T11654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.393740][T11646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.404246][T11646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.412036][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801de8f400: rx timeout, send abort [ 553.896533][T13491] lo speed is unknown, defaulting to 1000 [ 553.903153][T13491] lo speed is unknown, defaulting to 1000 [ 553.912199][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801de8f400: abort rx timeout. Force session deactivation [ 553.972378][ T30] audit: type=1400 audit(1750869153.207:2421): avc: denied { write } for pid=13493 comm="syz.5.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 554.110955][T11654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 554.204450][T13498] netlink: 'syz.4.1814': attribute type 12 has an invalid length. [ 554.265564][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1816'. [ 555.469750][T13515] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1821'. [ 555.478907][T13515] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1821'. [ 555.499963][T13515] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1821'. [ 555.513609][T13515] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1821'. [ 555.525612][T13515] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1821'. [ 556.293033][T13520] overlayfs: failed to resolve './file0': -2 [ 556.561644][T11646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.600214][T12424] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 556.670842][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.682720][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.762845][T12424] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 556.771321][T12424] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.783609][T12424] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 556.792715][T12424] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 556.800923][T12424] usb 3-1: Manufacturer: syz [ 556.806971][T12424] usb 3-1: config 0 descriptor?? [ 556.860237][T12424] rc_core: IR keymap rc-hauppauge not found [ 556.866187][T12424] Registered IR keymap rc-empty [ 556.871793][T12424] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 556.882812][T12424] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 557.217837][T13528] rc rc0: two consecutive events of type space [ 557.623598][T12424] usb 3-1: USB disconnect, device number 96 [ 558.037468][T11646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.092599][T11646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.324173][T11646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.338285][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1826'. [ 558.981896][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 558.991214][T11646] bridge_slave_1: left allmulticast mode [ 559.003461][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 559.010489][T11646] bridge_slave_1: left promiscuous mode [ 559.010653][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.024159][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 559.033118][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 559.112507][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 559.120718][T11646] bridge_slave_0: left allmulticast mode [ 559.138414][T11646] bridge_slave_0: left promiscuous mode [ 559.147408][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.680389][ T5940] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 559.872818][T11617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.898188][ T5940] usb 6-1: config 217 has an invalid interface number: 4 but max is 0 [ 559.914098][ T5940] usb 6-1: config 217 has no interface number 0 [ 559.926221][ T5940] usb 6-1: config 217 interface 4 has no altsetting 0 [ 559.964156][ T5940] usb 6-1: New USB device found, idVendor=1b3d, idProduct=01a4, bcdDevice=3b.11 [ 559.975387][ T5940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.993717][ T5940] usb 6-1: Product: syz [ 560.111423][T13550] ALSA: mixer_oss: invalid index 40000 [ 560.118566][ T5940] usb 6-1: Manufacturer: syz [ 560.123253][ T5940] usb 6-1: SerialNumber: syz [ 560.134932][T11646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 560.145718][T11646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 560.157433][T11646] bond0 (unregistering): Released all slaves [ 560.687324][T13541] lo speed is unknown, defaulting to 1000 [ 561.030615][T13575] overlayfs: failed to resolve './file0': -2 [ 561.151651][ T5825] Bluetooth: hci0: command tx timeout [ 561.400387][ T5900] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.457616][T13541] lo speed is unknown, defaulting to 1000 [ 561.711589][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.963836][T13591] SET target dimension over the limit! [ 562.248497][T11646] hsr_slave_0: left promiscuous mode [ 562.272306][T11646] hsr_slave_1: left promiscuous mode [ 562.279767][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.287721][T11646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.296702][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.317131][T11646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.386743][T11646] veth1_macvtap: left promiscuous mode [ 562.411280][ T5940] ftdi_sio 6-1:217.4: FTDI USB Serial Device converter detected [ 562.434122][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.454792][T11646] veth0_macvtap: left promiscuous mode [ 562.480523][T11646] veth1_vlan: left promiscuous mode [ 562.490548][T11646] veth0_vlan: left promiscuous mode [ 562.520499][ T5900] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 562.523496][ T5940] ftdi_sio ttyUSB0: unknown device type: 0x3b11 [ 562.572961][ T5940] usb 6-1: USB disconnect, device number 65 [ 562.615242][ T5940] ftdi_sio 6-1:217.4: device disconnected [ 562.702471][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 562.712799][ T5900] usb 3-1: unable to get BOS descriptor or descriptor too short [ 562.731199][ T5900] usb 3-1: config 249 has an invalid interface number: 144 but max is 0 [ 562.739661][ T5900] usb 3-1: config 249 has no interface number 0 [ 562.750018][ T5900] usb 3-1: config 249 interface 144 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 562.768447][ T5900] usb 3-1: config 249 interface 144 has no altsetting 0 [ 562.794678][ T5900] usb 3-1: New USB device found, idVendor=099e, idProduct=0052, bcdDevice=5f.88 [ 562.810205][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.823173][ T5900] usb 3-1: Product: Ч [ 562.827289][ T5900] usb 3-1: Manufacturer: 㿲䈣馚ᓗࡇ䄱Жנּ흖켂Ꚃ๢率ꇄ曆ᢓ掐섨歆쥀냂籃窾襐ᆿ팱㒚敔럯솘䟆廣ć闌陘ᗈ녑ἥ䳂﷉韵謿䃳🙻 [ 562.850036][ T5900] usb 3-1: SerialNumber: 륓퓢瘾있ϼફ᥍踗ꛕ붶出牄，驁ᴶ䇡㩑腬ꗪḠ䔶숂䣔뻖꽈⾚曾辵縐纯✧喔ݲ檋쬢瓌﹵븞夊ጻ뜲숗壜愁ွ㴾꒝闞ဘ劻䋏햌㛸⌱脕꤄뽻ⴴ恎㯾懥녌຺ꆝ熸ᒧ䲎ﻠ㟪昀퉓ࣿഔ솋힇馌몾㪻⒬띺原⛧럣仦螉ֹ맵լዟ䥝鏲ታﶞ쫡˅ՙ벥ᖜ⪖ꂙ쬃Ԟ济塝혳䣼⸫⾪ [ 563.241377][ T5819] Bluetooth: hci0: command tx timeout [ 563.484173][ T5900] usb 3-1: USB disconnect, device number 97 [ 563.782403][T11646] team0 (unregistering): Port device team_slave_1 removed [ 563.829162][T11646] team0 (unregistering): Port device team_slave_0 removed [ 565.321052][ T5819] Bluetooth: hci0: command tx timeout [ 565.647697][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1854'. [ 566.129396][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.339292][T13593] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 566.349302][T13593] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 566.365911][T13541] chnl_net:caif_netlink_parms(): no params data found [ 566.377707][T13627] team0: Device is already in use. [ 566.535110][T13637] openvswitch: netlink: Actions may not be safe on all matching packets [ 566.613276][T13541] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.620670][T13541] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.627864][T13541] bridge_slave_0: entered allmulticast mode [ 566.635902][T13541] bridge_slave_0: entered promiscuous mode [ 566.645641][T13541] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.653722][T13644] netlink: 'syz.5.1859': attribute type 6 has an invalid length. [ 566.661649][T13541] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.663382][ T30] audit: type=1400 audit(1750869165.887:2422): avc: denied { connect } for pid=13636 comm="syz.6.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 566.668801][T13541] bridge_slave_1: entered allmulticast mode [ 566.698226][T13541] bridge_slave_1: entered promiscuous mode [ 566.719119][ T30] audit: type=1400 audit(1750869165.947:2423): avc: denied { getopt } for pid=13636 comm="syz.6.1858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 566.767162][T13541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.795828][T13541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.927920][T13541] team0: Port device team_slave_0 added [ 566.942719][T13541] team0: Port device team_slave_1 added [ 566.995775][T13541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.004255][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.040326][T13541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.132589][T13541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.140004][T13541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.165955][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.172597][T13541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.345984][T13541] hsr_slave_0: entered promiscuous mode [ 567.361125][T13541] hsr_slave_1: entered promiscuous mode [ 567.390259][ T5819] Bluetooth: hci0: command tx timeout [ 567.627369][T11655] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.810665][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.957442][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 567.989365][T13665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1865'. [ 568.184573][ T30] audit: type=1400 audit(1750869167.407:2424): avc: denied { bind } for pid=13668 comm="syz.6.1864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 569.070187][T13676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1867'. [ 569.114222][T13676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.205549][T13676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.986359][T13689] fuse: Bad value for 'fd' [ 570.002018][T13687] lo speed is unknown, defaulting to 1000 [ 570.009157][T13687] lo speed is unknown, defaulting to 1000 [ 570.127032][T13541] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 570.144324][T13541] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 570.167352][T13541] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 570.191871][T13541] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 570.276634][T13541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.309101][T13541] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.323277][T11607] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.330479][T11607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.348016][T11607] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.355223][T11607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.528622][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 570.652461][T13541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.698509][T13541] veth0_vlan: entered promiscuous mode [ 570.751211][T11607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.771476][T13541] veth1_vlan: entered promiscuous mode [ 570.821911][ T30] audit: type=1400 audit(1750869170.057:2425): avc: denied { ioctl } for pid=13710 comm="syz.5.1874" path="socket:[50326]" dev="sockfs" ino=50326 ioctlcmd=0x8b2c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 570.889789][T13541] veth0_macvtap: entered promiscuous mode [ 570.924501][T13541] veth1_macvtap: entered promiscuous mode [ 570.945358][T13541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.959659][T13541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.979930][T13541] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.990816][T13541] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.999539][T13541] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.012669][T13541] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.027385][T13716] lo speed is unknown, defaulting to 1000 [ 571.059451][T13716] lo speed is unknown, defaulting to 1000 [ 571.252776][T11655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.288958][T11655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.362231][T13723] overlayfs: failed to clone upperpath [ 571.924450][T13730] FAULT_INJECTION: forcing a failure. [ 571.924450][T13730] name failslab, interval 1, probability 0, space 0, times 0 [ 571.937370][T13730] CPU: 0 UID: 0 PID: 13730 Comm: syz.5.1879 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 571.937394][T13730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.937403][T13730] Call Trace: [ 571.937409][T13730] [ 571.937415][T13730] dump_stack_lvl+0x16c/0x1f0 [ 571.937446][T13730] should_fail_ex+0x512/0x640 [ 571.937467][T13730] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 571.937491][T13730] should_failslab+0xc2/0x120 [ 571.937517][T13730] __kmalloc_cache_node_noprof+0x6d/0x420 [ 571.937539][T13730] ? __alloc_workqueue+0x506/0x1810 [ 571.937568][T13730] __alloc_workqueue+0x506/0x1810 [ 571.937601][T13730] alloc_workqueue+0xd2/0x200 [ 571.937624][T13730] ? __pfx_alloc_workqueue+0x10/0x10 [ 571.937662][T13730] hci_register_dev+0x1cf/0xc60 [ 571.937690][T13730] hci_uart_tty_ioctl+0x7e2/0xc30 [ 571.937718][T13730] ? __pfx_hci_uart_tty_ioctl+0x10/0x10 [ 571.937741][T13730] tty_ioctl+0x6fd/0x1640 [ 571.937766][T13730] ? __pfx_tty_ioctl+0x10/0x10 [ 571.937790][T13730] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 571.937821][T13730] ? hook_file_ioctl_common+0x145/0x410 [ 571.937855][T13730] ? selinux_file_ioctl+0x180/0x270 [ 571.937877][T13730] ? selinux_file_ioctl+0xb4/0x270 [ 571.937900][T13730] ? __pfx_tty_ioctl+0x10/0x10 [ 571.937925][T13730] __x64_sys_ioctl+0x18e/0x210 [ 571.937947][T13730] do_syscall_64+0xcd/0x4c0 [ 571.937973][T13730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.937995][T13730] RIP: 0033:0x7f414cd8e929 [ 571.938010][T13730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.938027][T13730] RSP: 002b:00007f414db13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.938043][T13730] RAX: ffffffffffffffda RBX: 00007f414cfb6080 RCX: 00007f414cd8e929 [ 571.938054][T13730] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000005 [ 571.938065][T13730] RBP: 00007f414db13090 R08: 0000000000000000 R09: 0000000000000000 [ 571.938075][T13730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.938085][T13730] R13: 0000000000000000 R14: 00007f414cfb6080 R15: 00007ffd55b43858 [ 571.938108][T13730] [ 572.201256][T13730] Bluetooth: Can't register HCI device [ 572.241184][T11646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.288663][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1880'. [ 572.317259][T11607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.317277][T11607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.514676][T13729] netlink: 'syz.2.1878': attribute type 9 has an invalid length. [ 572.894434][T13748] netlink: 5064 bytes leftover after parsing attributes in process `syz.2.1885'. [ 572.903932][T13748] netlink: 5064 bytes leftover after parsing attributes in process `syz.2.1885'. [ 572.919842][T13748] netlink: 'syz.2.1885': attribute type 21 has an invalid length. [ 572.928074][T13748] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1885'. [ 572.937233][T13748] netlink: 'syz.2.1885': attribute type 6 has an invalid length. [ 572.945068][T13748] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1885'. [ 573.316462][T11617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.332827][T11646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 574.592984][T13769] overlayfs: failed to clone upperpath [ 574.616648][T13768] SET target dimension over the limit! [ 575.110221][ T5900] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 575.260146][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 575.266872][ T5900] usb 6-1: unable to get BOS descriptor or descriptor too short [ 575.275963][ T5900] usb 6-1: config 249 has an invalid interface number: 144 but max is 0 [ 575.285120][ T5900] usb 6-1: config 249 has no interface number 0 [ 575.291550][ T5900] usb 6-1: config 249 interface 144 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 575.302822][ T5900] usb 6-1: config 249 interface 144 has no altsetting 0 [ 575.312624][ T5900] usb 6-1: New USB device found, idVendor=099e, idProduct=0052, bcdDevice=5f.88 [ 575.321833][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.329824][ T5900] usb 6-1: Product: Ч [ 575.334141][ T5900] usb 6-1: Manufacturer: 㿲䈣馚ᓗࡇ䄱Жנּ흖켂Ꚃ๢率ꇄ曆ᢓ掐섨歆쥀냂籃窾襐ᆿ팱㒚敔럯솘䟆廣ć闌陘ᗈ녑ἥ䳂﷉韵謿䃳🙻 [ 575.352156][ T5900] usb 6-1: SerialNumber: 륓퓢瘾있ϼફ᥍踗ꛕ붶出牄，驁ᴶ䇡㩑腬ꗪḠ䔶숂䣔뻖꽈⾚曾辵縐纯✧喔ݲ檋쬢瓌﹵븞夊ጻ뜲숗壜愁ွ㴾꒝闞ဘ劻䋏햌㛸⌱脕꤄뽻ⴴ恎㯾懥녌຺ꆝ熸ᒧ䲎ﻠ㟪昀퉓ࣿഔ솋힇馌몾㪻⒬띺原⛧럣仦螉ֹ맵լዟ䥝鏲ታﶞ쫡˅ՙ벥ᖜ⪖ꂙ쬃Ԟ济塝혳䣼⸫⾪ [ 575.650476][ T5900] usb 6-1: USB disconnect, device number 66 [ 575.732453][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1898'. [ 575.742278][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1898'. [ 575.824151][T13789] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1900'. [ 575.838520][T13789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13789 comm=syz.2.1900 [ 575.942777][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.545078][ T30] audit: type=1400 audit(1750869176.777:2426): avc: denied { mounton } for pid=13807 comm="syz.6.1905" path="/403/file0" dev="tmpfs" ino=2366 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 577.610611][T13816] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.793004][ T2334] pvrusb2: request_firmware fatal error with code=-110 [ 577.823423][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.843108][ T2334] pvrusb2: Failure uploading firmware1 [ 577.860056][ T2334] pvrusb2: Device initialization was not successful. [ 577.881913][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 578.324940][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 578.345317][ T5869] pvrusb2: Device being rendered inoperable [ 578.366324][T11607] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.465208][T11607] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.536170][T11607] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.625130][T11607] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.729098][T11607] bridge_slave_1: left allmulticast mode [ 578.735368][T11607] bridge_slave_1: left promiscuous mode [ 578.741632][T11607] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.751202][T11607] bridge_slave_0: left allmulticast mode [ 578.756857][T11607] bridge_slave_0: left promiscuous mode [ 578.762961][T11607] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.059759][T11607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.070054][T11607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.071255][T11655] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.089861][T11617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.102722][T11607] bond0 (unregistering): Released all slaves [ 579.305503][T11607] hsr_slave_0: left promiscuous mode [ 579.313854][T11607] hsr_slave_1: left promiscuous mode [ 579.319523][T11607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.328495][T11607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.338322][T11607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.345853][T11607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.360471][T11607] veth1_macvtap: left promiscuous mode [ 579.365995][T11607] veth0_macvtap: left promiscuous mode [ 579.373195][T11607] veth1_vlan: left promiscuous mode [ 579.378462][T11607] veth0_vlan: left promiscuous mode [ 579.722395][T11607] team0 (unregistering): Port device team_slave_1 removed [ 579.757631][T11607] team0 (unregistering): Port device team_slave_0 removed [ 580.491356][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 580.497473][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 580.766648][T13844] overlay: Unknown parameter 'hash' [ 581.286574][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 581.296987][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 581.305695][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 581.308716][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 581.315158][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 581.328870][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 581.330352][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 581.503118][T13859] FAULT_INJECTION: forcing a failure. [ 581.503118][T13859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.517565][T13859] CPU: 1 UID: 0 PID: 13859 Comm: syz.5.1918 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 581.517591][T13859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 581.517602][T13859] Call Trace: [ 581.517609][T13859] [ 581.517616][T13859] dump_stack_lvl+0x16c/0x1f0 [ 581.517647][T13859] should_fail_ex+0x512/0x640 [ 581.517675][T13859] _copy_from_user+0x2e/0xd0 [ 581.517701][T13859] kstrtouint_from_user+0xd6/0x1d0 [ 581.517720][T13859] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 581.517739][T13859] ? __lock_acquire+0xb8a/0x1c90 [ 581.517779][T13859] proc_fail_nth_write+0x83/0x250 [ 581.517804][T13859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 581.517834][T13859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 581.517855][T13859] vfs_write+0x2a0/0x1150 [ 581.517882][T13859] ? __pfx___mutex_lock+0x10/0x10 [ 581.517916][T13859] ? __pfx_vfs_write+0x10/0x10 [ 581.517946][T13859] ? __fget_files+0x20e/0x3c0 [ 581.517979][T13859] ksys_write+0x12a/0x250 [ 581.518002][T13859] ? __pfx_ksys_write+0x10/0x10 [ 581.518032][T13859] do_syscall_64+0xcd/0x4c0 [ 581.518060][T13859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.518079][T13859] RIP: 0033:0x7f414cd8d3df [ 581.518095][T13859] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 581.518112][T13859] RSP: 002b:00007f414abf6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 581.518130][T13859] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f414cd8d3df [ 581.518142][T13859] RDX: 0000000000000001 RSI: 00007f414abf60a0 RDI: 000000000000000c [ 581.518152][T13859] RBP: 00007f414abf6090 R08: 0000000000000000 R09: 0000000000000000 [ 581.518163][T13859] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 581.518174][T13859] R13: 0000000000000000 R14: 00007f414cfb6160 R15: 00007ffd55b43858 [ 581.518201][T13859] [ 581.604832][T13854] lo speed is unknown, defaulting to 1000 [ 581.691679][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.813171][T13863] overlayfs: failed to clone upperpath [ 582.222308][T13558] libceph: connect (1)[c::]:6789 error -101 [ 582.228405][T13558] libceph: mon0 (1)[c::]:6789 connect error [ 582.243482][T13843] ceph: No mds server is up or the cluster is laggy [ 582.306702][T13854] lo speed is unknown, defaulting to 1000 [ 582.709366][T13854] chnl_net:caif_netlink_parms(): no params data found [ 583.590540][T11646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 583.634755][ T5819] Bluetooth: hci0: command tx timeout [ 583.953579][T13854] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.974156][T13854] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.693432][T13854] bridge_slave_0: entered allmulticast mode [ 584.700995][T13854] bridge_slave_0: entered promiscuous mode [ 584.708897][T13854] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.716073][T13854] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.723579][T13854] bridge_slave_1: entered allmulticast mode [ 584.760428][T13854] bridge_slave_1: entered promiscuous mode [ 584.878046][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 584.889033][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 584.919524][T13854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.359129][T13854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.443380][T13854] team0: Port device team_slave_0 added [ 585.547889][T13854] team0: Port device team_slave_1 added [ 585.722772][ T5819] Bluetooth: hci0: command tx timeout [ 586.051208][ T30] audit: type=1400 audit(1750869185.177:2427): avc: denied { associate } for pid=13910 comm="syz.2.1934" name=33C4 scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 586.194302][T13914] overlayfs: failed to clone upperpath [ 586.780936][T13854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.793278][T13854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.856991][T13925] xt_l2tp: wrong L2TP version: 0 [ 586.859829][T13854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.884489][T13854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.892065][T13854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.921573][T13854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.969874][T13854] hsr_slave_0: entered promiscuous mode [ 586.982427][T13854] hsr_slave_1: entered promiscuous mode [ 587.110199][ T5948] usb 6-1: new full-speed USB device number 67 using dummy_hcd [ 587.210963][ T10] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 587.272629][ T5948] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 587.284985][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 587.296074][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64 [ 587.312159][ T5948] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 587.321417][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.329803][ T5948] usb 6-1: Product: syz [ 587.334564][ T5948] usb 6-1: Manufacturer: syz [ 587.339202][ T5948] usb 6-1: SerialNumber: syz [ 587.361658][ T10] usb 3-1: config 217 has an invalid interface number: 4 but max is 0 [ 587.369868][ T10] usb 3-1: config 217 has no interface number 0 [ 587.468537][ T5948] usb 6-1: config 0 descriptor?? [ 587.477380][ T30] audit: type=1400 audit(1750869186.607:2428): avc: denied { map } for pid=13930 comm="syz.4.1940" path="socket:[51606]" dev="sockfs" ino=51606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 587.478866][ T10] usb 3-1: config 217 interface 4 has no altsetting 0 [ 587.508868][T13924] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 587.558030][ T10] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01a4, bcdDevice=3b.11 [ 587.563978][ T30] audit: type=1400 audit(1750869186.607:2429): avc: denied { accept } for pid=13930 comm="syz.4.1940" path="socket:[51606]" dev="sockfs" ino=51606 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 587.567918][ T5948] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input21 [ 587.609504][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.640215][ T10] usb 3-1: Product: syz [ 587.644425][ T10] usb 3-1: Manufacturer: syz [ 587.649051][ T10] usb 3-1: SerialNumber: syz [ 587.800718][ T5819] Bluetooth: hci0: command tx timeout [ 587.833518][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.842063][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.849364][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.856725][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.864360][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.871655][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.878907][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.886243][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.893553][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.900835][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.908119][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.915465][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.922807][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.930163][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.937456][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.944767][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.952524][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.959836][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.967132][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.974477][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.981814][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.989119][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 587.996452][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.003770][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.011122][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.018490][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.025787][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.033349][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.040639][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.047927][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.055216][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.062526][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.069825][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.077123][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.084450][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.091781][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.099065][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.106408][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.113785][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.118202][T13938] netlink: 252 bytes leftover after parsing attributes in process `syz.6.1941'. [ 588.121071][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.137533][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.144891][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.145093][T11632] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 588.152226][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.170346][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.177674][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.185897][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.193245][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.201582][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.208831][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.216085][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.223333][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.230579][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.237863][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.245148][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.252409][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.259658][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.266934][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.274194][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.281455][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.288714][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.295984][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.303248][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.310514][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.317781][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.325035][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.332301][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.339545][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.346797][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.354051][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.361322][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.368581][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.375867][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.383125][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.390399][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.397707][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.405032][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.412349][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.419674][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.426991][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.434617][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.444189][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.451482][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.458777][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.466181][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.476251][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.490163][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.497620][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.505132][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.512469][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.519762][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.527069][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.534372][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.541664][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.548951][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.556246][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.563603][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.573693][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.590265][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.597672][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.605093][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.612441][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.619721][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.627052][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.634418][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.638163][T13854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 588.641792][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.641973][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.664878][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.667317][T13854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 588.672722][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.686632][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.695108][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.702582][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.710056][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.719910][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.727255][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.734616][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.738999][T13854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 588.742005][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.756703][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.761960][T13941] netlink: del zone limit has 4 unknown bytes [ 588.764153][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.777299][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.784781][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.792347][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.799766][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.807355][ T5171] usb 6-1: control msg error: -71 [ 588.807369][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.820152][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.820346][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.820526][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.842671][ C0] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.849859][ C0] usb 6-1: pegasus_irq - usb_submit_urb failed with result -1 [ 588.873067][T13854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 588.887916][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.895264][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.902591][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.909981][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.917697][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.925211][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.932558][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.939860][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.947587][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.955041][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.962377][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.969607][ T5171] usb 6-1: control msg error: -71 [ 588.975090][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.976046][ T5948] usb 6-1: USB disconnect, device number 67 [ 588.982348][ C1] usb 6-1: pegasus_irq - nonzero urb status received: -71 [ 588.982373][ C1] usb 6-1: pegasus_irq - usb_submit_urb failed with result -19 [ 589.122893][T13854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.144035][T13854] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.156986][T11620] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.164177][T11620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.179771][T11660] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.186942][T11660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.310863][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 589.365429][T13854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.397621][T13854] veth0_vlan: entered promiscuous mode [ 589.407765][T13854] veth1_vlan: entered promiscuous mode [ 589.434453][T13854] veth0_macvtap: entered promiscuous mode [ 589.443280][T13854] veth1_macvtap: entered promiscuous mode [ 589.464115][T13854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.492245][T13854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.507390][T13854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.516414][T13854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.527368][T13854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.557363][T13854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.733590][T11620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.746321][T11620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.901298][ T5819] Bluetooth: hci0: command tx timeout [ 590.203672][ T10] ftdi_sio 3-1:217.4: FTDI USB Serial Device converter detected [ 590.239218][ T10] ftdi_sio ttyUSB0: unknown device type: 0x3b11 [ 590.292166][ T10] usb 3-1: USB disconnect, device number 98 [ 590.347905][ T10] ftdi_sio 3-1:217.4: device disconnected [ 590.801394][T11607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 590.816207][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 590.836404][T11646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.872569][T11646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.410201][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 591.810254][T13991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1955'. [ 591.819319][T13991] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1955'. [ 591.850191][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 591.856691][ T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 591.869728][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.904991][ T10] usb 3-1: config 0 descriptor?? [ 592.932523][ T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 592.948915][ T10] asix 3-1:0.0: probe with driver asix failed with error -71 [ 592.964190][ T10] usb 3-1: USB disconnect, device number 99 [ 593.757341][T14016] ip6t_srh: unknown srh match flags B153 [ 593.800969][T11607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.431288][T11632] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 594.495238][T11646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.152329][T14034] pimreg3: entered allmulticast mode [ 596.162744][T14037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 596.263985][T11646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.306838][T14034] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 596.350851][T11607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.351357][T11632] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 596.395970][T11646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.442820][T14050] netlink: 'syz.4.1975': attribute type 4 has an invalid length. [ 596.451112][T14050] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1975'. [ 596.472709][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 596.486080][T11646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.490215][T13558] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 596.505227][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 596.533322][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 596.546543][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 596.560170][ T5869] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 596.560757][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 596.647487][T11646] bridge_slave_1: left allmulticast mode [ 596.659632][T11646] bridge_slave_1: left promiscuous mode [ 596.667373][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.677427][T11646] bridge_slave_0: left allmulticast mode [ 596.683527][T11646] bridge_slave_0: left promiscuous mode [ 596.689259][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.730360][T13558] usb 3-1: Using ep0 maxpacket: 32 [ 596.735786][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 596.752361][T13558] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 596.765562][T13558] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 596.778813][ T5869] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 596.789957][T13558] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 596.799152][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.812283][T13558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.823451][ T5869] usb 6-1: config 0 descriptor?? [ 596.838742][T13558] usb 3-1: config 0 descriptor?? [ 596.869800][T13558] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 597.165540][T11646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.191030][T11646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.217221][T11646] bond0 (unregistering): Released all slaves [ 597.241682][T14051] lo speed is unknown, defaulting to 1000 [ 597.242573][T14051] lo speed is unknown, defaulting to 1000 [ 597.470805][ T5869] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 597.482127][ T5869] asix 6-1:0.0: probe with driver asix failed with error -32 [ 597.619015][T11646] hsr_slave_0: left promiscuous mode [ 597.630392][T11646] hsr_slave_1: left promiscuous mode [ 597.636509][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.649554][T11646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.661157][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.668767][T11646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.704502][T11646] veth1_macvtap: left promiscuous mode [ 597.711452][T11646] veth0_macvtap: left promiscuous mode [ 597.717287][T11646] veth1_vlan: left promiscuous mode [ 597.724870][T11646] veth0_vlan: left promiscuous mode [ 598.500829][T11646] team0 (unregistering): Port device team_slave_1 removed [ 598.521006][ T5869] usb 3-1: USB disconnect, device number 100 [ 598.579903][T11646] team0 (unregistering): Port device team_slave_0 removed [ 598.636716][ T5825] Bluetooth: hci0: command tx timeout [ 599.166745][T14051] chnl_net:caif_netlink_parms(): no params data found [ 599.183277][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1985'. [ 599.544929][ T5869] usb 6-1: USB disconnect, device number 68 [ 599.707791][T11655] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.026880][T14095] overlayfs: failed to clone upperpath [ 600.027495][T14051] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.067712][T14051] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.075547][T14051] bridge_slave_0: entered allmulticast mode [ 600.087265][T14051] bridge_slave_0: entered promiscuous mode [ 600.095778][T14051] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.116282][T14051] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.123761][T14051] bridge_slave_1: entered allmulticast mode [ 600.131211][T14051] bridge_slave_1: entered promiscuous mode [ 600.352804][T14051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.704211][ T5869] usb 6-1: new low-speed USB device number 69 using dummy_hcd [ 600.712620][T11663] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.715803][T14051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.790398][T14051] team0: Port device team_slave_0 added [ 600.804595][T14051] team0: Port device team_slave_1 added [ 600.851019][T14051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.858031][T14051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.883993][ C1] vkms_vblank_simulate: vblank timer overrun [ 600.891064][ T5825] Bluetooth: hci0: command tx timeout [ 600.897440][T14051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.913545][ T5869] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 600.921933][ T5869] usb 6-1: config 0 has no interface number 0 [ 600.935097][ T5869] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 600.947784][T14051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.954807][T14051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.981247][ T5869] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 600.992342][ T5869] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 601.001641][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.010498][T14051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.055811][ T5869] usb 6-1: config 0 descriptor?? [ 601.123798][T14103] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 601.142655][ T5869] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 601.262151][T14051] hsr_slave_0: entered promiscuous mode [ 601.273613][T14051] hsr_slave_1: entered promiscuous mode [ 602.094452][ C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 602.112046][ T5948] usb 6-1: USB disconnect, device number 69 [ 602.369798][ T30] audit: type=1400 audit(1750869201.312:2430): avc: denied { read } for pid=14124 comm="syz.6.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 602.398602][T11663] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 602.400919][T11655] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 602.879077][T14051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 602.888058][T14051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 602.899068][T14051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 602.910570][T14051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 603.083436][ T5825] Bluetooth: hci0: command tx timeout [ 603.531281][T14051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.560471][T14051] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.576567][T11663] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.583737][T11663] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.618157][T11663] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.625308][T11663] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.819637][T14150] overlayfs: failed to clone upperpath [ 605.328434][ T5825] Bluetooth: hci0: command tx timeout [ 605.432651][T14162] IPVS: length: 123 != 8 [ 605.897558][T11663] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 605.986848][T14177] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2008'. [ 606.161270][T11663] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 606.254472][T14051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.422183][T14051] veth0_vlan: entered promiscuous mode [ 606.534055][T14051] veth1_vlan: entered promiscuous mode [ 606.563919][T14051] veth0_macvtap: entered promiscuous mode [ 606.573704][T14051] veth1_macvtap: entered promiscuous mode [ 606.595813][T14051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.609468][T14051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.661554][T14051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.673983][T14051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.695341][T14051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.724507][T14051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.534621][T14205] SET target dimension over the limit! [ 607.586587][T11660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.628780][T11660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.728492][T11655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.736505][T11655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.849944][ T5869] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 608.039192][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 608.093244][ T5869] usb 6-1: unable to get BOS descriptor or descriptor too short [ 608.265469][ T5869] usb 6-1: config 249 has an invalid interface number: 144 but max is 0 [ 608.291074][ T5869] usb 6-1: config 249 has no interface number 0 [ 608.308678][ T5869] usb 6-1: config 249 interface 144 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 608.556825][T11607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 608.576444][T11617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 608.753278][ T5869] usb 6-1: config 249 interface 144 has no altsetting 0 [ 608.767924][ T5869] usb 6-1: New USB device found, idVendor=099e, idProduct=0052, bcdDevice=5f.88 [ 608.777405][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.785522][ T5869] usb 6-1: Product: Ч [ 608.789666][ T5869] usb 6-1: Manufacturer: 㿲䈣馚ᓗࡇ䄱Жנּ흖켂Ꚃ๢率ꇄ曆ᢓ掐섨歆쥀냂籃窾襐ᆿ팱㒚敔럯솘䟆廣ć闌陘ᗈ녑ἥ䳂﷉韵謿䃳🙻 [ 608.807873][ T5869] usb 6-1: SerialNumber: 륓퓢瘾있ϼફ᥍踗ꛕ붶出牄，驁ᴶ䇡㩑腬ꗪḠ䔶숂䣔뻖꽈⾚曾辵縐纯✧喔ݲ檋쬢瓌﹵븞夊ጻ뜲숗壜愁ွ㴾꒝闞ဘ劻䋏햌㛸⌱脕꤄뽻ⴴ恎㯾懥녌຺ꆝ熸ᒧ䲎ﻠ㟪昀퉓ࣿഔ솋힇馌몾㪻⒬띺原⛧럣仦螉ֹ맵լዟ䥝鏲ታﶞ쫡˅ՙ벥ᖜ⪖ꂙ쬃Ԟ济塝혳䣼⸫⾪ [ 608.841328][ C1] vkms_vblank_simulate: vblank timer overrun [ 609.361547][ T5869] usb 6-1: USB disconnect, device number 70 [ 609.442160][T14234] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2020'. [ 609.811370][T11620] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.126772][T11620] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.223099][T11620] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.551061][T11620] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.831138][T11620] bridge_slave_1: left allmulticast mode [ 610.837560][T11620] bridge_slave_1: left promiscuous mode [ 610.847163][T11620] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.857961][T11620] bridge_slave_0: left allmulticast mode [ 610.863733][T11620] bridge_slave_0: left promiscuous mode [ 610.894633][T11620] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.288085][T11620] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.299643][T11620] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.309921][T11620] bond0 (unregistering): Released all slaves [ 611.533777][T11620] hsr_slave_0: left promiscuous mode [ 611.539671][T11620] hsr_slave_1: left promiscuous mode [ 611.545293][T11620] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.553224][T11654] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 611.557580][T11620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.573630][T11620] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.581242][T11620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.597671][T11620] veth1_macvtap: left promiscuous mode [ 611.604742][T11620] veth0_macvtap: left promiscuous mode [ 611.610306][T11620] veth1_vlan: left promiscuous mode [ 611.615821][T11620] veth0_vlan: left promiscuous mode [ 611.990152][T11646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 612.129544][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 612.138013][ T5885] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 612.157406][ T5819] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 612.166529][ T5819] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 612.178024][ T5819] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 612.187165][ T5819] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 612.290340][T11620] team0 (unregistering): Port device team_slave_1 removed [ 612.338283][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 612.352905][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 612.365059][T11620] team0 (unregistering): Port device team_slave_0 removed [ 612.372697][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 612.393138][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 612.421025][ T5885] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 612.438847][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.463337][ T5885] usb 3-1: config 0 descriptor?? [ 612.471989][T14248] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 613.495851][T14268] netlink: 'syz.2.2023': attribute type 11 has an invalid length. [ 613.505536][ T30] audit: type=1400 audit(1750869211.236:2431): avc: denied { bind } for pid=14261 comm="syz.5.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 613.682852][T14270] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.707329][T14270] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.952525][ T5940] lo speed is unknown, defaulting to 1000 [ 614.000640][T14272] wg2: left promiscuous mode [ 614.005466][T14272] wg2: left allmulticast mode [ 614.017296][T14272] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.024539][T14272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.064139][ T30] audit: type=1326 audit(1750869212.256:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd8e929 code=0x7ffc0000 [ 614.081800][T14272] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.094838][T14272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.096742][ T30] audit: type=1326 audit(1750869212.274:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd8e929 code=0x7ffc0000 [ 614.129146][ T30] audit: type=1326 audit(1750869212.274:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7f3d9fd8e929 code=0x7ffc0000 [ 614.155143][ T30] audit: type=1326 audit(1750869212.274:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd8e929 code=0x7ffc0000 [ 614.169187][T14272] veth1_vlan: left allmulticast mode [ 614.190446][ T30] audit: type=1326 audit(1750869212.274:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd8e929 code=0x7ffc0000 [ 614.223517][ T30] audit: type=1326 audit(1750869212.274:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d9fd8e929 code=0x7ffc0000 [ 614.238869][T14272] veth0_vlan: left allmulticast mode [ 614.253430][ T30] audit: type=1326 audit(1750869212.274:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd8e929 code=0x7ffc0000 [ 614.259033][T14272] vxlan0: left promiscuous mode [ 614.279155][ T30] audit: type=1326 audit(1750869212.274:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d9fd8e929 code=0x7ffc0000 [ 614.309794][ T30] audit: type=1326 audit(1750869212.274:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14269 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d9fd8e929 code=0x7ffc0000 [ 614.337050][T14272] vxlan1: left promiscuous mode [ 614.463445][ T5819] Bluetooth: hci0: command tx timeout [ 614.485012][T14254] lo speed is unknown, defaulting to 1000 [ 614.497088][ T5885] usbhid 3-1:0.0: can't add hid device: -71 [ 614.505018][ T5885] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 614.522088][ T5885] usb 3-1: USB disconnect, device number 101 [ 614.548430][T14254] lo speed is unknown, defaulting to 1000 [ 614.559814][T14293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2034'. [ 614.616390][T14293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 614.639896][T14299] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2038'. [ 614.643329][T14296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 614.652381][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2038'. [ 614.656061][T14296] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 614.678652][T14296] bond2: (slave vcan0): Error -95 calling set_mac_address [ 614.699761][T14299] IPv6: sit1: Disabled Multicast RS [ 614.705482][T14299] sit1: entered allmulticast mode [ 614.715543][T11617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 614.727250][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 615.723800][T14308] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2041'. [ 615.931847][T14254] chnl_net:caif_netlink_parms(): no params data found [ 616.688918][ T5819] Bluetooth: hci0: command tx timeout [ 617.452537][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 617.807757][T14334] overlayfs: failed to clone upperpath [ 618.181834][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 618.475800][T14254] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.493217][T14254] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.512111][T14254] bridge_slave_0: entered allmulticast mode [ 618.529317][T14254] bridge_slave_0: entered promiscuous mode [ 618.554678][T14254] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.571025][T14254] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.586298][T14254] bridge_slave_1: entered allmulticast mode [ 618.594751][T14254] bridge_slave_1: entered promiscuous mode [ 618.771710][T14254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.783993][T14254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.786541][ T5900] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 618.991476][ T5819] Bluetooth: hci0: command tx timeout [ 619.066056][T14348] overlayfs: failed to clone upperpath [ 619.298215][T14254] team0: Port device team_slave_0 added [ 619.308866][T14254] team0: Port device team_slave_1 added [ 619.394651][T14254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.407935][T14351] FAULT_INJECTION: forcing a failure. [ 619.407935][T14351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.414223][T14254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.421390][T14351] CPU: 1 UID: 0 PID: 14351 Comm: syz.2.2047 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 619.421410][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 619.421420][T14351] Call Trace: [ 619.421425][T14351] [ 619.421431][T14351] dump_stack_lvl+0x16c/0x1f0 [ 619.421457][T14351] should_fail_ex+0x512/0x640 [ 619.421480][T14351] _copy_from_user+0x2e/0xd0 [ 619.421502][T14351] __sys_bpf+0x21d/0x4d80 [ 619.421526][T14351] ? __pfx___sys_bpf+0x10/0x10 [ 619.421546][T14351] ? ksys_write+0x190/0x250 [ 619.421569][T14351] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 619.421604][T14351] ? fput+0x70/0xf0 [ 619.421626][T14351] ? ksys_write+0x1ac/0x250 [ 619.421643][T14351] ? __pfx_ksys_write+0x10/0x10 [ 619.421665][T14351] __x64_sys_bpf+0x78/0xc0 [ 619.421685][T14351] ? lockdep_hardirqs_on+0x7c/0x110 [ 619.421705][T14351] do_syscall_64+0xcd/0x4c0 [ 619.421727][T14351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.421742][T14351] RIP: 0033:0x7f832b38e929 [ 619.421755][T14351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.421769][T14351] RSP: 002b:00007f83291d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 619.421784][T14351] RAX: ffffffffffffffda RBX: 00007f832b5b6160 RCX: 00007f832b38e929 [ 619.421794][T14351] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 619.421803][T14351] RBP: 00007f83291d5090 R08: 0000000000000000 R09: 0000000000000000 [ 619.421812][T14351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.421821][T14351] R13: 0000000000000000 R14: 00007f832b5b6160 R15: 00007ffc358f9af8 [ 619.421842][T14351] [ 619.699272][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 619.704872][T14254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.718356][ T5900] usb 6-1: config 0 has an invalid descriptor of length 27, skipping remainder of the config [ 619.728735][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 619.744769][ T5900] usb 6-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00 [ 619.757920][T14254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.765887][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.776391][T14254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.824585][ T5900] usb 6-1: config 0 descriptor?? [ 619.848277][T14355] netlink: 'syz.4.2051': attribute type 11 has an invalid length. [ 619.862055][T14254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.964789][T14254] hsr_slave_0: entered promiscuous mode [ 619.971189][T14254] hsr_slave_1: entered promiscuous mode [ 620.133201][ T5900] usb 6-1: string descriptor 0 read error: -71 [ 620.153060][ T5900] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input22 [ 620.189498][ T5171] bcm5974 6-1:0.0: could not read from device [ 620.201098][ T5171] bcm5974 6-1:0.0: could not read from device [ 620.350053][ T5900] usb 6-1: USB disconnect, device number 71 [ 620.356242][ T5171] bcm5974 6-1:0.0: could not read from device [ 620.399725][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 620.399740][ T30] audit: type=1400 audit(1750869218.177:2442): avc: denied { map } for pid=14359 comm="syz.2.2052" path="socket:[53100]" dev="sockfs" ino=53100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 620.456983][T14340] bcm5974 6-1:0.0: could not read from device [ 620.487130][ T30] audit: type=1400 audit(1750869218.205:2443): avc: denied { read } for pid=14359 comm="syz.2.2052" path="socket:[53100]" dev="sockfs" ino=53100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 620.882283][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 620.893743][T11617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 621.396204][ T5819] Bluetooth: hci0: command tx timeout [ 621.825553][T14382] netlink: 'syz.5.2058': attribute type 10 has an invalid length. [ 622.364210][T14254] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 622.589029][T14254] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 622.906635][T14254] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 622.933362][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 623.379851][T14254] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 623.597978][T14254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.616274][T14254] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.641881][T11660] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.648981][T11660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.666100][T11660] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.673217][T11660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.790168][ T5869] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 623.912812][ T30] audit: type=1400 audit(1750869221.460:2444): avc: denied { ioctl } for pid=14407 comm="syz.2.2065" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 623.939946][T14417] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 623.949086][T14417] overlayfs: missing 'lowerdir' [ 623.973846][ T5869] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 623.982652][ T5869] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 624.060332][ T5869] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 624.116206][ T30] audit: type=1400 audit(1750869221.656:2445): avc: denied { ioctl } for pid=14422 comm="syz.2.2068" path="socket:[55410]" dev="sockfs" ino=55410 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 624.123546][ T5869] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 624.156624][T14254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.181187][ T5869] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 624.198136][ T5869] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 624.215472][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 624.240757][ T5869] usb 6-1: Product: syz [ 624.258083][ T5869] usb 6-1: Manufacturer: syz [ 624.294583][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.312295][T14254] veth0_vlan: entered promiscuous mode [ 624.324934][ T5869] cdc_wdm 6-1:1.0: skipping garbage [ 624.345921][ T5869] cdc_wdm 6-1:1.0: skipping garbage [ 624.411803][T14254] veth1_vlan: entered promiscuous mode [ 624.424143][ T5869] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 624.430089][ T5869] cdc_wdm 6-1:1.0: Unknown control protocol [ 624.460851][ T30] audit: type=1400 audit(1750869221.975:2446): avc: denied { getopt } for pid=14432 comm="syz.6.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 624.518822][T14254] veth0_macvtap: entered promiscuous mode [ 624.542976][T14254] veth1_macvtap: entered promiscuous mode [ 624.577843][T14254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.594092][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 624.600871][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 624.610166][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 624.616772][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 624.623454][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 624.630053][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 624.636214][ T5869] usb 6-1: USB disconnect, device number 72 [ 624.642203][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 624.642216][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 624.642224][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 624.680109][T14254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.690265][T14254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.701057][T14254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.717190][T14254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.727224][T14254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.752832][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2072'. [ 624.778136][T14438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2072'. [ 624.864938][ T30] audit: type=1326 audit(1750869735.352:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcc38e929 code=0x7ffc0000 [ 624.932868][ T30] audit: type=1326 audit(1750869735.352:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadcc38d290 code=0x7ffc0000 [ 625.075935][T11620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.100624][T11620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.114368][ T30] audit: type=1326 audit(1750869735.352:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcc38e929 code=0x7ffc0000 [ 625.537972][ T30] audit: type=1326 audit(1750869735.352:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fadcc38e929 code=0x7ffc0000 [ 625.562594][ T30] audit: type=1326 audit(1750869735.352:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14437 comm="syz.4.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadcc38e929 code=0x7ffc0000 [ 625.595541][T11654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.616975][T11654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.645414][T14455] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.657674][T14455] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.100626][T14456] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.107773][T14456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.196205][T14456] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.203355][T14456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.319594][T14456] veth0_vlan: left allmulticast mode [ 626.356743][T11607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 626.440440][T14456] macvlan2: left promiscuous mode [ 626.456795][T14456] macvlan2: left allmulticast mode [ 626.475888][T14456] ip6gretap1: left promiscuous mode [ 626.499632][T14456] ip6gretap1: left allmulticast mode [ 626.588785][T14456] sit1: left allmulticast mode [ 627.139582][T11607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 627.255295][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 627.255310][ T30] audit: type=1400 audit(1750869737.597:2458): avc: denied { ioctl } for pid=14467 comm="syz.5.2080" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 627.369537][T11617] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.464339][ T30] audit: type=1400 audit(1750869737.784:2459): avc: denied { wake_alarm } for pid=14470 comm="syz.2.2081" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 627.617078][T13558] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 627.789562][T13558] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.807210][T13558] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.817521][T13558] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 627.826709][T13558] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.839409][T13558] usb 6-1: config 0 descriptor?? [ 628.277796][T13558] cp2112 0003:10C4:EA90.0012: item fetching failed at offset 5/7 [ 628.286578][T13558] cp2112 0003:10C4:EA90.0012: parse failed [ 628.292665][T13558] cp2112 0003:10C4:EA90.0012: probe with driver cp2112 failed with error -22 [ 628.500747][ T5948] usb 6-1: USB disconnect, device number 73 [ 628.564821][T11617] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.625607][T11617] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.721660][T11617] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.864389][T11617] bridge_slave_1: left allmulticast mode [ 628.870807][T11617] bridge_slave_1: left promiscuous mode [ 628.876474][T11617] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.885297][T11617] bridge_slave_0: left allmulticast mode [ 628.893135][T11617] bridge_slave_0: left promiscuous mode [ 628.898785][T11617] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.082370][T11660] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 629.193334][T11617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.203702][T11617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.213483][T11617] bond0 (unregistering): Released all slaves [ 629.475469][T11617] hsr_slave_0: left promiscuous mode [ 629.481472][T11617] hsr_slave_1: left promiscuous mode [ 629.487176][T11617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.494801][T11617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.503653][T11617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.511338][T11617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.528649][T11617] veth1_macvtap: left promiscuous mode [ 629.534381][T11617] veth0_macvtap: left promiscuous mode [ 629.539892][T11617] veth1_vlan: left promiscuous mode [ 629.545265][T11617] veth0_vlan: left promiscuous mode [ 629.878363][T14485] xt_hashlimit: invalid interval [ 630.454400][T11655] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 630.540764][T11617] team0 (unregistering): Port device team_slave_1 removed [ 630.638293][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 630.649131][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 630.660189][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 630.672688][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 630.682148][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 630.752041][T11617] team0 (unregistering): Port device team_slave_0 removed [ 630.786320][ T30] audit: type=1400 audit(1750869740.890:2460): avc: denied { append } for pid=14480 comm="syz.2.2084" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 630.857515][ T30] audit: type=1800 audit(1750869740.918:2461): pid=14483 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2084" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 631.151505][T14506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=14506 comm=syz.2.2089 [ 631.409649][T14498] lo speed is unknown, defaulting to 1000 [ 631.423123][ T5885] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 631.424506][T14498] lo speed is unknown, defaulting to 1000 [ 631.608126][ T5885] usb 3-1: config 0 interface 0 has no altsetting 0 [ 631.622971][ T5885] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 631.628362][T14517] xt_l2tp: wrong L2TP version: 0 [ 631.632350][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.658342][ T5885] usb 3-1: config 0 descriptor?? [ 631.799063][T14498] chnl_net:caif_netlink_parms(): no params data found [ 631.817872][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2093'. [ 631.828603][ T5900] usb 6-1: new low-speed USB device number 74 using dummy_hcd [ 631.836531][T11646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 631.885688][T14504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.898286][T14504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.917294][ T5885] (null): keene_cmd_main failed (-71) [ 631.938780][ T5885] video4linux radio48: keene_cmd_main failed (-71) [ 631.963441][ T5885] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 631.974335][ T5885] usb 3-1: USB disconnect, device number 102 [ 632.016953][T14498] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.033903][ T5900] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 632.041940][ T5900] usb 6-1: config 0 has no interface number 0 [ 632.044868][T14498] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.058745][T14498] bridge_slave_0: entered allmulticast mode [ 632.066523][T14498] bridge_slave_0: entered promiscuous mode [ 632.067617][ T5900] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 632.086248][T14498] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.094350][T14498] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.105267][T14498] bridge_slave_1: entered allmulticast mode [ 632.113717][T14498] bridge_slave_1: entered promiscuous mode [ 632.116188][ T5900] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 632.137636][ T5900] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 632.149629][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.154118][T14498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.183125][T14498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.199252][ T5900] usb 6-1: config 0 descriptor?? [ 632.205059][T14511] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 632.220095][ T5900] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 632.295338][T14535] netlink: 'syz.4.2098': attribute type 29 has an invalid length. [ 632.311455][T14498] team0: Port device team_slave_0 added [ 632.327729][T14498] team0: Port device team_slave_1 added [ 632.344351][T14537] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.352432][T14537] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.380984][T14535] netlink: 'syz.4.2098': attribute type 29 has an invalid length. [ 632.392523][T14538] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2098'. [ 632.414801][T14537] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.421978][T14537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.442554][T14537] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.449749][T14537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.605591][ T5885] usb 6-1: USB disconnect, device number 74 [ 632.624578][T14498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.652611][T14498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.699826][T14498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.712539][ T30] audit: type=1400 audit(1750869742.686:2462): avc: denied { setopt } for pid=14550 comm="syz.2.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 632.753596][T14498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.764556][T14498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.805628][T14498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.928550][T14498] hsr_slave_0: entered promiscuous mode [ 632.934223][ T5819] Bluetooth: hci0: command tx timeout [ 632.940627][T14498] hsr_slave_1: entered promiscuous mode [ 632.954231][ T5900] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 633.198809][T11646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.597510][ T5900] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 633.658666][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.666705][ T5900] usb 3-1: Product: syz [ 633.680360][ T5900] usb 3-1: Manufacturer: syz [ 633.685002][ T5900] usb 3-1: SerialNumber: syz [ 633.693967][ T5900] usb 3-1: config 0 descriptor?? [ 634.703444][T14571] SET target dimension over the limit! [ 634.742634][ T5900] mos7840 3-1:0.0: required endpoints missing [ 634.873061][T14498] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 634.883295][T14498] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 634.893800][T14498] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 634.902971][T14498] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 634.955197][T14498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.959467][ T5948] usb 3-1: USB disconnect, device number 103 [ 634.974924][T14498] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.988215][T11646] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.995344][T11646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.014639][T11617] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.021761][T11617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.036378][ T5900] usb 6-1: new full-speed USB device number 75 using dummy_hcd [ 635.154142][ T5819] Bluetooth: hci0: command tx timeout [ 635.162399][T14498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.192898][T14498] veth0_vlan: entered promiscuous mode [ 635.202298][T14498] veth1_vlan: entered promiscuous mode [ 635.224645][T14498] veth0_macvtap: entered promiscuous mode [ 635.224662][ T5900] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.234749][T14498] veth1_macvtap: entered promiscuous mode [ 635.252362][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 635.257392][T14498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.283541][T14498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.300580][T14498] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.303759][ T5900] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 635.310046][T14498] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.330589][T14498] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.336777][ T5900] usb 6-1: New USB device found, idVendor=e06b, idProduct=0151, bcdDevice= 0.40 [ 635.339825][T14498] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.367792][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.396387][ T5900] usb 6-1: Product: syz [ 635.410932][ T5900] usb 6-1: Manufacturer: syz [ 635.419444][ T5900] usb 6-1: SerialNumber: syz [ 635.472758][T14591] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2114'. [ 635.560079][T11655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.576252][T11655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.616708][T14595] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.629584][T14595] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.762111][T11646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.777493][T11646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.296184][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.320222][T14600] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.327384][T14600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.348649][T14600] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.355825][T14600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.897115][ T5819] Bluetooth: hci0: command tx timeout [ 637.976615][T11617] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 638.355762][T14620] SET target dimension over the limit! [ 639.349121][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.381025][ T5900] usb 6-1: 0:2 : does not exist [ 639.428781][ T5900] usb 6-1: USB disconnect, device number 75 [ 640.728229][T14358] udevd[14358]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 640.750628][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 640.793208][T14631] overlayfs: failed to clone upperpath [ 641.418325][T11646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.760132][T11646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.867221][T11646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.975561][T11646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.082417][T11620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.097141][T11646] bridge_slave_1: left allmulticast mode [ 642.103625][T11646] bridge_slave_1: left promiscuous mode [ 642.109955][T11646] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.120420][T11646] bridge_slave_0: left allmulticast mode [ 642.126615][T11646] bridge_slave_0: left promiscuous mode [ 642.132325][T11646] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.442517][T11646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.452910][T11646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.462739][T11646] bond0 (unregistering): Released all slaves [ 642.685788][T11646] hsr_slave_0: left promiscuous mode [ 642.695358][T11646] hsr_slave_1: left promiscuous mode [ 642.701028][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 642.710699][T11646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.718862][T11646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 642.726473][T11646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.742532][T11646] veth1_macvtap: left promiscuous mode [ 642.748087][T11646] veth0_macvtap: left promiscuous mode [ 642.753609][T11646] veth1_vlan: left promiscuous mode [ 642.758984][T11646] veth0_vlan: left promiscuous mode [ 643.114351][T11646] team0 (unregistering): Port device team_slave_1 removed [ 643.153954][T11646] team0 (unregistering): Port device team_slave_0 removed [ 644.019798][T14666] SET target dimension over the limit! [ 644.092259][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 644.101427][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 644.111785][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 644.121037][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 644.129817][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 644.136158][T11646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.155361][ T5869] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 644.172347][T14667] lo speed is unknown, defaulting to 1000 [ 644.179595][T14667] lo speed is unknown, defaulting to 1000 [ 644.264587][T14667] chnl_net:caif_netlink_parms(): no params data found [ 644.305201][ T5885] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 644.322322][T14667] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.329610][T14667] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.336742][T14667] bridge_slave_0: entered allmulticast mode [ 644.338386][ T5869] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.344569][T14667] bridge_slave_0: entered promiscuous mode [ 644.358632][ T5869] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 644.358697][ T5869] usb 6-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 644.358718][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.360610][ T5869] usb 6-1: config 0 descriptor?? [ 644.394225][T14667] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.403698][T14667] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.410899][T14667] bridge_slave_1: entered allmulticast mode [ 644.418560][T14667] bridge_slave_1: entered promiscuous mode [ 644.446313][T14667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.458048][T14667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.487164][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 644.496095][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 644.506256][ T5885] usb 3-1: config 249 has an invalid interface number: 144 but max is 0 [ 644.514721][ T5885] usb 3-1: config 249 has no interface number 0 [ 644.524504][T14667] team0: Port device team_slave_0 added [ 644.530351][ T5885] usb 3-1: config 249 interface 144 altsetting 3 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 644.543583][T14667] team0: Port device team_slave_1 added [ 644.556913][ T5885] usb 3-1: config 249 interface 144 has no altsetting 0 [ 644.574545][ T5885] usb 3-1: New USB device found, idVendor=099e, idProduct=0052, bcdDevice=5f.88 [ 644.595961][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.604929][ T5885] usb 3-1: Product: Ч [ 644.662841][T14667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.670083][ T5885] usb 3-1: Manufacturer: 㿲䈣馚ᓗࡇ䄱Жנּ흖켂Ꚃ๢率ꇄ曆ᢓ掐섨歆쥀냂籃窾襐ᆿ팱㒚敔럯솘䟆廣ć闌陘ᗈ녑ἥ䳂﷉韵謿䃳🙻 [ 644.693498][T14667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.720400][ T5885] usb 3-1: SerialNumber: 륓퓢瘾있ϼફ᥍踗ꛕ붶出牄，驁ᴶ䇡㩑腬ꗪḠ䔶숂䣔뻖꽈⾚曾辵縐纯✧喔ݲ檋쬢瓌﹵븞夊ጻ뜲숗壜愁ွ㴾꒝闞ဘ劻䋏햌㛸⌱脕꤄뽻ⴴ恎㯾懥녌຺ꆝ熸ᒧ䲎ﻠ㟪昀퉓ࣿഔ솋힇馌몾㪻⒬띺原⛧럣仦螉ֹ맵լዟ䥝鏲ታﶞ쫡˅ՙ벥ᖜ⪖ꂙ쬃Ԟ济塝혳䣼⸫⾪ [ 644.755348][T14657] overlayfs: missing 'lowerdir' [ 644.781160][T14667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.798584][T14667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.807879][T14667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.835828][T11646] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 644.853844][T14667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.907328][T14667] hsr_slave_0: entered promiscuous mode [ 644.913986][T14667] hsr_slave_1: entered promiscuous mode [ 645.079040][ T5885] usb 3-1: USB disconnect, device number 104 [ 645.109795][ T5869] Bluetooth: Can't get version to change to load ram patch err [ 645.119462][ T5869] Bluetooth: Loading patch file failed [ 645.126201][ T5869] ath3k 6-1:0.0: probe with driver ath3k failed with error -71 [ 645.144878][ T5869] usb 6-1: USB disconnect, device number 76 [ 645.430748][T14667] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 645.442469][T14667] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 645.452496][T14667] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 645.467464][T14667] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 645.552509][T14667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.655316][T14667] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.993107][T11607] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.000319][T11607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.024858][T11607] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.032058][T11607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.060039][T14667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 646.073334][T14667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 646.369608][ T5825] Bluetooth: hci0: command tx timeout [ 647.166995][T11632] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 647.502331][T14667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.575537][T14667] veth0_vlan: entered promiscuous mode [ 647.586160][T14667] veth1_vlan: entered promiscuous mode [ 647.689579][T14667] veth0_macvtap: entered promiscuous mode [ 647.693584][T14667] veth1_macvtap: entered promiscuous mode [ 647.710983][T14667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.166997][T14667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.171746][T14667] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.171775][T14667] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.171794][T14667] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.171813][T14667] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.242030][T11607] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.375057][T11607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.397363][T11607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.437197][T11663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.507455][T11663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.551854][T14732] SET target dimension over the limit! [ 648.581376][ C0] ------------[ cut here ]------------ [ 648.587259][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 648.593992][ C0] WARNING: CPU: 0 PID: 14667 at kernel/workqueue.c:2257 __queue_work+0xc9c/0x10f0 [ 648.603193][ C0] Modules linked in: [ 648.607286][ C0] CPU: 0 UID: 0 PID: 14667 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 648.619505][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.629535][ C0] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 648.634883][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 00 ff ab 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 d6 53 38 00 90 0f 0b 90 e9 1b f6 ff [ 648.654483][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 648.660528][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae248 [ 648.668476][ C0] RDX: ffff88807e1d8000 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 648.676420][ C0] RBP: ffff88805ae64930 R08: 0000000000000001 R09: 0000000000000000 [ 648.684379][ C0] R10: 0000000000000000 R11: fffffffffffdaf40 R12: 1ffff92000000f8f [ 648.692332][ C0] R13: 0000000000000101 R14: ffff88805cbe9178 R15: 0000000000000001 [ 648.700300][ C0] FS: 0000000000000000(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 648.709238][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.715816][ C0] CR2: 00007fadcd1c0f70 CR3: 0000000063241000 CR4: 00000000003526f0 [ 648.723775][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 648.731730][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 648.739688][ C0] Call Trace: [ 648.742954][ C0] [ 648.745800][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 648.751597][ C0] call_timer_fn+0x19a/0x620 [ 648.756199][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 648.761303][ C0] ? __run_timers+0x559/0x960 [ 648.765971][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 648.771768][ C0] __run_timers+0x569/0x960 [ 648.776269][ C0] ? __pfx___run_timers+0x10/0x10 [ 648.781300][ C0] run_timer_base+0x114/0x190 [ 648.785965][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 648.791158][ C0] run_timer_softirq+0x1a/0x40 [ 648.795913][ C0] handle_softirqs+0x216/0x8e0 [ 648.800667][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 648.805944][ C0] __irq_exit_rcu+0x109/0x170 [ 648.810611][ C0] irq_exit_rcu+0x9/0x30 [ 648.814839][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 648.820464][ C0] [ 648.823383][ C0] [ 648.826300][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 648.832287][ C0] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 648.838101][ C0] Code: df 55 65 48 8b 2d 2c 29 4b 08 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 bf ab 07 f6 e8 4a 37 42 f6 fb bf 01 00 00 00 af 99 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 0d 33 07 [ 648.857721][ C0] RSP: 0018:ffffc9000470f838 EFLAGS: 00000206 [ 648.863778][ C0] RAX: 00000000000296d7 RBX: ffffed100fc3b000 RCX: 0000000000000006 [ 648.871737][ C0] RDX: 0000000000000000 RSI: ffffffff8de19f59 RDI: 0000000000000001 [ 648.879692][ C0] RBP: ffff88807e1d8000 R08: 0000000000000001 R09: 0000000000000001 [ 648.887650][ C0] R10: ffffffff90a81257 R11: 0000000000000000 R12: 0000000000000000 [ 648.895604][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.903573][ C0] ? preempt_schedule_irq+0x46/0x90 [ 648.908772][ C0] irqentry_exit+0x36/0x90 [ 648.913183][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 648.918628][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 648.923820][ C0] Code: 63 34 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 95 0f 0f 0f 82 74 02 00 00 8b 35 4a c7 0f 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 f9 62 34 12 0f 85 c7 02 00 00 48 83 c4 [ 648.943412][ C0] RSP: 0018:ffffc9000470f908 EFLAGS: 00000206 [ 648.949464][ C0] RAX: 0000000000000046 RBX: ffff88805cbe9148 RCX: 0000000000000001 [ 648.957439][ C0] RDX: 0000000000000000 RSI: ffffffff8ddf4a83 RDI: ffffffff8c157ba0 [ 648.965422][ C0] RBP: 0000000000000000 R08: 5ab81cf52b67bbc9 R09: ffffffff96c38bb0 [ 648.973387][ C0] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000001 [ 648.981346][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 648.989320][ C0] ? lockdep_init_map_type+0x5c/0x280 [ 648.994692][ C0] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 648.999975][ C0] touch_wq_lockdep_map+0xad/0x1c0 [ 649.005077][ C0] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 649.010353][ C0] __flush_workqueue+0x128/0x1230 [ 649.015367][ C0] ? drain_workqueue+0xd1/0x3d0 [ 649.020210][ C0] ? __pfx___flush_workqueue+0x10/0x10 [ 649.025655][ C0] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 649.031293][ C0] drain_workqueue+0x199/0x3d0 [ 649.036044][ C0] hci_dev_close_sync+0x39b/0x11d0 [ 649.041148][ C0] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 649.046676][ C0] ? up_write+0x1b2/0x520 [ 649.050994][ C0] hci_dev_do_close+0x2e/0x90 [ 649.055658][ C0] hci_unregister_dev+0x213/0x620 [ 649.060692][ C0] ? __pfx_vhci_release+0x10/0x10 [ 649.065704][ C0] vhci_release+0x79/0xf0 [ 649.070022][ C0] __fput+0x3ff/0xb70 [ 649.073996][ C0] task_work_run+0x150/0x240 [ 649.078574][ C0] ? __pfx_task_work_run+0x10/0x10 [ 649.083670][ C0] ? switch_task_namespaces+0xeb/0x100 [ 649.089125][ C0] do_exit+0x86c/0x2bd0 [ 649.093274][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 649.098286][ C0] ? __pfx_do_exit+0x10/0x10 [ 649.102867][ C0] ? rcu_is_watching+0x12/0xc0 [ 649.107637][ C0] do_group_exit+0xd3/0x2a0 [ 649.112130][ C0] __x64_sys_exit_group+0x3e/0x50 [ 649.117147][ C0] x64_sys_call+0x1530/0x1730 [ 649.121813][ C0] do_syscall_64+0xcd/0x4c0 [ 649.126314][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.132201][ C0] RIP: 0033:0x7fe93f98e929 [ 649.136601][ C0] Code: Unable to access opcode bytes at 0x7fe93f98e8ff. [ 649.143597][ C0] RSP: 002b:00007fff85cd1848 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 649.151994][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe93f98e929 [ 649.159965][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 649.167921][ C0] RBP: 00007fe93f9ee8f0 R08: 00007fff85ccf5e7 R09: 0000000000000003 [ 649.175875][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.183831][ C0] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff85cd1a00 [ 649.191800][ C0] [ 649.194808][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 649.202074][ C0] CPU: 0 UID: 0 PID: 14667 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 649.214293][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 649.224331][ C0] Call Trace: [ 649.227593][ C0] [ 649.230422][ C0] dump_stack_lvl+0x3d/0x1f0 [ 649.235013][ C0] panic+0x71c/0x800 [ 649.238904][ C0] ? __pfx_panic+0x10/0x10 [ 649.243315][ C0] ? show_trace_log_lvl+0x29b/0x3e0 [ 649.248520][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 649.253623][ C0] ? __queue_work+0xc9c/0x10f0 [ 649.258374][ C0] check_panic_on_warn+0xab/0xb0 [ 649.263303][ C0] __warn+0xf6/0x3c0 [ 649.267191][ C0] ? __queue_work+0xc9c/0x10f0 [ 649.271943][ C0] report_bug+0x3c3/0x580 [ 649.276266][ C0] ? __queue_work+0xc9c/0x10f0 [ 649.281019][ C0] handle_bug+0x184/0x210 [ 649.285345][ C0] exc_invalid_op+0x17/0x50 [ 649.289832][ C0] asm_exc_invalid_op+0x1a/0x20 [ 649.294668][ C0] RIP: 0010:__queue_work+0xc9c/0x10f0 [ 649.300026][ C0] Code: 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 04 00 00 48 8b 75 18 4c 89 f2 48 c7 c7 00 ff ab 8b e8 f5 16 f7 ff 90 <0f> 0b 90 90 e9 96 f7 ff ff e8 d6 53 38 00 90 0f 0b 90 e9 1b f6 ff [ 649.319639][ C0] RSP: 0018:ffffc90000007be8 EFLAGS: 00010082 [ 649.325691][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae248 [ 649.333648][ C0] RDX: ffff88807e1d8000 RSI: ffffffff817ae255 RDI: 0000000000000001 [ 649.341611][ C0] RBP: ffff88805ae64930 R08: 0000000000000001 R09: 0000000000000000 [ 649.349575][ C0] R10: 0000000000000000 R11: fffffffffffdaf40 R12: 1ffff92000000f8f [ 649.357531][ C0] R13: 0000000000000101 R14: ffff88805cbe9178 R15: 0000000000000001 [ 649.365496][ C0] ? __warn_printk+0x198/0x350 [ 649.370256][ C0] ? __warn_printk+0x1a5/0x350 [ 649.375013][ C0] ? __queue_work+0xc9b/0x10f0 [ 649.379771][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 649.385562][ C0] call_timer_fn+0x19a/0x620 [ 649.390142][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 649.395246][ C0] ? __run_timers+0x559/0x960 [ 649.399914][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 649.405706][ C0] __run_timers+0x569/0x960 [ 649.410205][ C0] ? __pfx___run_timers+0x10/0x10 [ 649.415233][ C0] run_timer_base+0x114/0x190 [ 649.419902][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 649.425092][ C0] run_timer_softirq+0x1a/0x40 [ 649.429844][ C0] handle_softirqs+0x216/0x8e0 [ 649.434597][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 649.439878][ C0] __irq_exit_rcu+0x109/0x170 [ 649.444540][ C0] irq_exit_rcu+0x9/0x30 [ 649.448769][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 649.454392][ C0] [ 649.457314][ C0] [ 649.460239][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 649.466208][ C0] RIP: 0010:preempt_schedule_irq+0x4c/0x90 [ 649.472004][ C0] Code: df 55 65 48 8b 2d 2c 29 4b 08 53 48 89 eb 48 c1 eb 03 48 01 c3 bf 01 00 00 00 e8 bf ab 07 f6 e8 4a 37 42 f6 fb bf 01 00 00 00 af 99 ff ff 9c 58 fa f6 c4 02 75 1e bf 01 00 00 00 e8 0d 33 07 [ 649.491601][ C0] RSP: 0018:ffffc9000470f838 EFLAGS: 00000206 [ 649.497657][ C0] RAX: 00000000000296d7 RBX: ffffed100fc3b000 RCX: 0000000000000006 [ 649.505613][ C0] RDX: 0000000000000000 RSI: ffffffff8de19f59 RDI: 0000000000000001 [ 649.513570][ C0] RBP: ffff88807e1d8000 R08: 0000000000000001 R09: 0000000000000001 [ 649.521524][ C0] R10: ffffffff90a81257 R11: 0000000000000000 R12: 0000000000000000 [ 649.529478][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 649.537447][ C0] ? preempt_schedule_irq+0x46/0x90 [ 649.542636][ C0] irqentry_exit+0x36/0x90 [ 649.547042][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 649.552491][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 649.557680][ C0] Code: 63 34 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 62 95 0f 0f 0f 82 74 02 00 00 8b 35 4a c7 0f 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 f9 62 34 12 0f 85 c7 02 00 00 48 83 c4 [ 649.577274][ C0] RSP: 0018:ffffc9000470f908 EFLAGS: 00000206 [ 649.583327][ C0] RAX: 0000000000000046 RBX: ffff88805cbe9148 RCX: 0000000000000001 [ 649.591289][ C0] RDX: 0000000000000000 RSI: ffffffff8ddf4a83 RDI: ffffffff8c157ba0 [ 649.599247][ C0] RBP: 0000000000000000 R08: 5ab81cf52b67bbc9 R09: ffffffff96c38bb0 [ 649.607201][ C0] R10: 0000000000000008 R11: 0000000000000001 R12: 0000000000000001 [ 649.615157][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 649.623128][ C0] ? lockdep_init_map_type+0x5c/0x280 [ 649.628494][ C0] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 649.633772][ C0] touch_wq_lockdep_map+0xad/0x1c0 [ 649.638871][ C0] ? touch_wq_lockdep_map+0x9c/0x1c0 [ 649.644149][ C0] __flush_workqueue+0x128/0x1230 [ 649.649158][ C0] ? drain_workqueue+0xd1/0x3d0 [ 649.653997][ C0] ? __pfx___flush_workqueue+0x10/0x10 [ 649.659441][ C0] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 649.665085][ C0] drain_workqueue+0x199/0x3d0 [ 649.669837][ C0] hci_dev_close_sync+0x39b/0x11d0 [ 649.674941][ C0] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 649.680470][ C0] ? up_write+0x1b2/0x520 [ 649.684789][ C0] hci_dev_do_close+0x2e/0x90 [ 649.689471][ C0] hci_unregister_dev+0x213/0x620 [ 649.694481][ C0] ? __pfx_vhci_release+0x10/0x10 [ 649.699495][ C0] vhci_release+0x79/0xf0 [ 649.703818][ C0] __fput+0x3ff/0xb70 [ 649.707790][ C0] task_work_run+0x150/0x240 [ 649.712367][ C0] ? __pfx_task_work_run+0x10/0x10 [ 649.717465][ C0] ? switch_task_namespaces+0xeb/0x100 [ 649.722920][ C0] do_exit+0x86c/0x2bd0 [ 649.727087][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 649.732123][ C0] ? __pfx_do_exit+0x10/0x10 [ 649.736721][ C0] ? rcu_is_watching+0x12/0xc0 [ 649.741476][ C0] do_group_exit+0xd3/0x2a0 [ 649.745980][ C0] __x64_sys_exit_group+0x3e/0x50 [ 649.750994][ C0] x64_sys_call+0x1530/0x1730 [ 649.755657][ C0] do_syscall_64+0xcd/0x4c0 [ 649.760155][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.766032][ C0] RIP: 0033:0x7fe93f98e929 [ 649.770431][ C0] Code: Unable to access opcode bytes at 0x7fe93f98e8ff. [ 649.777427][ C0] RSP: 002b:00007fff85cd1848 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 649.785827][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe93f98e929 [ 649.793810][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 649.801777][ C0] RBP: 00007fe93f9ee8f0 R08: 00007fff85ccf5e7 R09: 0000000000000003 [ 649.809733][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.817689][ C0] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007fff85cd1a00 [ 649.825660][ C0] [ 649.828880][ C0] Kernel Offset: disabled [ 649.833183][ C0] Rebooting in 86400 seconds..